Hi, question:
can I span one index over multiple indexers without using clustering? If so, how? 🙂
TY!
Each index can be configured for each indexer, just include it in the definitions. Then use forwarders that use both indexers, Splunk will automatically split the traffic between the indexers configured.
http://docs.splunk.com/Documentation/Splunk/6.0/Deploy/Distributedoverview
Thank you!
If I have answered your questions, please accept my answer above. Thanks!
Hello
Of course you can, you only need to create the same index in several indexers, and then configure your UF to send data to all of them.
regards
Each index can be configured for each indexer, just include it in the definitions. Then use forwarders that use both indexers, Splunk will automatically split the traffic between the indexers configured.
http://docs.splunk.com/Documentation/Splunk/6.0/Deploy/Distributedoverview