Deployment Architecture

HEC Input on a existing and used Heavy Forwarder?

ojay
Path Finder

Hi all,

I am using a Heavy Forwarder for a few API related integration Methods of various data sources.

I have to consider an integration with HEC Integration now for a new source.

Is it possible to use a Heavy Forwarder and add a HEC input to it? Or should a HEC be a seperate machine?

Best,

O.

 

 

Labels (3)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

It depends on how busy the HF is, but it should be able to handle a HEC input.

---
If this reply helps you, Karma would be appreciated.
0 Karma

saravanan90
Contributor
0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...