heavy forwarder setup to forward to splunk cloud

[verifi81]

In the event that universal forwarders installed on internal servers forward to a heavy forwarder and the heavy forwarder forwards to splunk cloud, is the heavy forwarder indexing before sending to splunk cloud?

[anilchaithu · Accepted solution]

@verifi81 

In general, HF's won't index data before forwarding to indexers.