Hi,
I want to use db connect to pull in data from a heavy forwarder and route it to a set of indexers. Is there a way to do that?
Yes. http://docs.splunk.com/Documentation/DBX/1.1.4/DeployDBX/Otherdeploymentconsiderations