- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Deployment Planning - Search Head and Forwarder for M365
rmakjr0318
New Member
11-02-2021
01:06 PM
Hello,
Wanted to ask the community for some help on getting server build specifications for a stand alone search head/forwarder. We want to keep this search head/forwarder dedicated for M365 traffic. Any suggestions or documentation would be very helpful. Thank you.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
isoutamo

SplunkTrust
11-02-2021
01:10 PM
Hi
it depends how big your m365 environment is and what all data you want to collect from it. In general point of view basic HF should be enough even virtually. If/when it’s virtual you could easily update it to bigger or smaller if/when needed.
r. Ismo
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
rmakjr0318
New Member
11-02-2021
01:31 PM
Thanks for the reply. We are looking to support about 3500 users so I agree with your suggestion. Where can I find documentation on heavy forwarder specifications? I can only see the documentation for universal.
