Getting Data In

32 vs 64 bit forwarder

christopher_hod
Path Finder

I'm curious what the advantage to running the 64-bit forwarder is. I assume it won't ever need enough memory that it will matter.

So are there any advantages?

If there aren't then it would make things easier if we could just push out one version to all forwarders (the 32 bit version)

Tags (3)
1 Solution

amrit
Splunk Employee
Splunk Employee

As long as your system can run 32-bit software (is not pure-64), running a 32-bit forwarder should be just fine. The main advantages of using 64-bit Splunk are performance improvements with searching and indexing.

View solution in original post

amrit
Splunk Employee
Splunk Employee

As long as your system can run 32-bit software (is not pure-64), running a 32-bit forwarder should be just fine. The main advantages of using 64-bit Splunk are performance improvements with searching and indexing.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...