Splunk Core Certified Advanced Power User — Question 22

Which forwarder type can parse data prior to forwarding?

Answer options

• A. Universal forwarder
• B. Heaviest forwarder
• C. Hyper forwarder
• D. Heavy forwarder

Correct answer: D

Explanation

The Heavy forwarder can parse and process data before forwarding it, making it suitable for more complex data handling. In contrast, the Universal forwarder is designed for minimal processing, while options B and C are not standard terms in Splunk, which makes them incorrect.