[Splunk with satellite link environment - Traffic log ]

I am currently working on a POC where I came across a question:

My client has a Satellite communication link between HQ and remote branch, where the main data traffics. I'm worry to generate impact on the business of my client when installing the universal forwarder in Active Directory, Proxy and Firewall in the remote branch.

Is there any deployment of Splunk thinking in this scenario without burdening this link? Or any idea to implement this environment?

Thank you!