Universal forwarder is recommended for forwarding the logs to indexers.