I inherited a Splunk env and I noticed on the Heavy Forwarder- "Forwarding and receiving" page that in addition to some indexers, this HF's own server is also configured for forwarding.
Why previous Admin would have done this is beyond my understanding but keen to know what possible repercussions it can lead to ?
