|
gptkbp:instanceOf
|
gptkb:Splunk_Component
|
|
gptkbp:canAuthenticate
|
true
|
|
gptkbp:canBeClustered
|
false
|
|
gptkbp:canBeManagedByDeploymentServer
|
true
|
|
gptkbp:canCompressData
|
true
|
|
gptkbp:canEncryptData
|
true
|
|
gptkbp:canFilterData
|
true
|
|
gptkbp:canForwardData
|
true
|
|
gptkbp:canIndexData
|
true
|
|
gptkbp:canInstallAddOns
|
true
|
|
gptkbp:canInstallApps
|
true
|
|
gptkbp:canMonitorAPIs
|
true
|
|
gptkbp:canMonitorFiles
|
true
|
|
gptkbp:canMonitorPorts
|
true
|
|
gptkbp:canParseData
|
true
|
|
gptkbp:canRouteData
|
true
|
|
gptkbp:canRunCustomScripts
|
true
|
|
gptkbp:canRunScripts
|
true
|
|
gptkbp:canSendToMultipleDestinations
|
true
|
|
gptkbp:canTransformData
|
true
|
|
gptkbp:configuration
|
inputs.conf
outputs.conf
props.conf
transforms.conf
|
|
gptkbp:defaultPort
|
9997
|
|
gptkbp:developedBy
|
gptkb:Splunk_Inc.
|
|
gptkbp:documentation
|
https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Aboutforwarders
|
|
gptkbp:license
|
true
|
|
gptkbp:managementInterface
|
false
|
|
gptkbp:purpose
|
Data parsing
Data forwarding
Data indexing (optional)
|
|
gptkbp:relatedTo
|
gptkb:Splunk_Indexer
gptkb:Splunk_Search_Head
gptkb:Universal_Forwarder
|
|
gptkbp:runsOn
|
gptkb:Windows
gptkb:Linux
|
|
gptkbp:supports
|
Splunk apps
|
|
gptkbp:usedFor
|
Preprocessing data before indexing
Routing data to indexers
|
|
gptkbp:bfsParent
|
gptkb:Splunk_Forwarder
|
|
gptkbp:bfsLayer
|
8
|
|
http://www.w3.org/2000/01/rdf-schema#label
|
Heavy Forwarder
|