Getting Data In

How to change forwarder configuration to load balance across the indexers

RAYUDU_NARA
Explorer

We are planning to increasing Splunk indexers from 1 to 2. So, after this implementation, what are all the necessary changes we need to do at forwarder level.

0 Karma

skalliger
Motivator

Hi,

there are a couple of threads out there about this topic, even the splunk docs describe it here (forwarder load balancing) and here (indexer discovery).
You simply change your Universal/Heavy Forwarder's outputs.conf to one of those options.

Skalli

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...