I'm curious what the advantage to running the 64-bit forwarder is. I assume it won't ever need enough memory that it will matter.
So are there any advantages?
If there aren't then it would make things easier if we could just push out one version to all forwarders (the 32 bit version)
As long as your system can run 32-bit software (is not pure-64), running a 32-bit forwarder should be just fine. The main advantages of using 64-bit Splunk are performance improvements with searching and indexing.
View solution in original post