Need to install a second heavy forwarder and doing so seems to be more difficult than it should be.
Is there a separate download for a heavy forwarder? I do not see such an instance in the download section, only universal forwarders.
If not, what needs to be downloaded?
How does it get configured?
Does the heavy forwarder require a separate license?
We have been told, via Professional Services that the heavy forwarder was akin to the universal forwarder in that it did not require a separate license. After opening a ticket with tech support, it has been stated that we do. Splunk documentation is robust but at the same time very arduous to work through and information from tech support & Splunk engineers is not always along the same path. I appreciate any direction anyone can provide to the questions above.