Splunk Core Certified User — Question 210

Universal forwarder is recommended for forwarding the logs to indexers.

Answer options

• A. False
• B. True

Correct answer: B

Explanation

The Universal Forwarder is specifically designed for efficiently collecting and forwarding log data to indexers, making it the recommended choice for this task. The option 'False' is incorrect because it contradicts the recommended usage of the Universal Forwarder in Splunk environments.