Currently trying to load balance data from forwarder to indexer cluster ( idx1 & idx2) over ssl .
So this configuration is correct at forwarder outputs.conf?
[tcpout]
defaultGroup = LB
[tcpout:LB]
server = idx2:9998,idx1:9998
clientCrt = XXX
sslPassword = XXX
sslVerifyServerCert = XXX
problem statement - already try above configuration but LB happening only on idx2 until I make following change in idx1 inputs.conf
here i know that data is not moving over SSL
[splunktcp://9998]
connection_host = ip
[splunktcp-ssl:9998]
disabled = 0
[SSL]
serverCert = XXX
sslPassword = XXX
requireClientCert = false
idx2 inputs.conf
[splunktcp-ssl:9998]
disabled = 0
[SSL]
serverCert = XXX
sslPassword = XXX
requireClientCert = false
... View more