In my indexer cluster, on the MC under "Indexing>Performance>Indexing Performance: Deployment" I'm noticing that some about half of my indexers show close to 100% across queues (from parsing to indexing) and about half show less that 20% across queues (Quite a few are at 0% across queues).
My question is, why isnt the data being load balanced from the UFs? If some indexers are full, why is data not being sent to the indexers who have low volume in their queues? I keep getting warnings that forwarding destinations have failed, like they're only trying to send to the full indexers. My outputs.conf accounts for all indexers in the cluster, so there must be something else I'm overlooking.
... View more