All Apps and Add-ons

Does NetApp ONTAP 2.0.1 need intermediate forwarders?

Bill_B
Communicator

Hi. I'm trying to deploy the Splunk app for NetApp ONTAP (v. 2.0.1). In the documentation it shows intermediate forwarders for collecting and forwarding NetApp Data ONTAP logs. Here: http://docs.splunk.com/Documentation/NetApp/2.0.1/DeployNetapp/WhataSplunkAppforNetAppDataONTAPdeplo...
Do you actually need these intermediate forwarders or can the NetApp Data ONTAP logs be sent directly to the Splunk Enterprise instance?
Thank you.

1 Solution

martin_mueller
SplunkTrust
SplunkTrust

From a purely functional perspective, your syslog sources can directly send their data to Splunk indexers.

However, it's good practice to have a forwarder between syslog and indexers, running a syslog daemon on the forwarder and reading its logfile. That way you don't lose syslog data during indexer maintenance, e.g. for adding new index-time configuration, and you get a simple way to loadbalance the logs between the indexers.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

From a purely functional perspective, your syslog sources can directly send their data to Splunk indexers.

However, it's good practice to have a forwarder between syslog and indexers, running a syslog daemon on the forwarder and reading its logfile. That way you don't lose syslog data during indexer maintenance, e.g. for adding new index-time configuration, and you get a simple way to loadbalance the logs between the indexers.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...