When using Splunk Universal Forwarders, which of the following is true?

When using Splunk Universal Forwarders, which of the following is true?
A . No more than six Universal Forwarders may connect directly to Splunk Cloud.
B . Any number of Universal Forwarders may connect directly to Splunk Cloud.
C . Universal Forwarders must send data to an Intermediate Forwarder.
D . There must be one Intermediate Forwarder for every three Universal Forwarders.

View Answer

Answer: B

Explanation:

Universal Forwarders can connect directly to Splunk Cloud, and there is no limit on the number of Universal Forwarders that may connect directly to it. This capability allows organizations to scale their data ingestion easily by deploying as many Universal Forwarders as needed without the requirement for intermediate forwarders unless additional data processing, filtering, or load balancing is required.

Splunk Documentation

Reference: Forwarding Data to Splunk Cloud