title: Splunk enterprise Vs Universal forwarder
body: <p>I am very new to splunk. I have installed the enterprise app on an EC2 instance. </p>
  
  <p>I have many queries:</p>
  
  <ol>
  <li>What is the difference between splunk enterprise and universal forwarder?</li>
  <li>Difference between its capabilities?</li>
  <li>What use case they support?</li>
  </ol>