good day all. I have 2 forwarders forwarding data on to a load balanced indexer group. I am currently editing the parallelIngestion rate on the server.conf. I need to verify that they are sending data as 2 pipes. how do i go about this?
If you have multiple pipelines, then you should have
Metrics.log should be able to provide you the details about the ingestion. You shall looks for the processor group in
index=_internal source="splunk_installation_folder/var/log/splunk/metrics.log"