topic Re: HEC token management for HA in Security https://community.splunk.com/t5/Security/HEC-token-management-for-HA/m-p/325707#M8364 <P>Hi @deepashri_123,</P> <P>Based on documentation <A href="http://dev.splunk.com/view/event-collector/SP-CAAAE73">http://dev.splunk.com/view/event-collector/SP-CAAAE73</A>, <CODE>Note: Using HTTP Event Collector in a distributed deployment is incompatible with indexer clustering. Specifically, cluster peers are not supported as deployment clients.</CODE></P> <P>So in this case you require Heavy Forwarders and setup HEC on those machines.</P> Wed, 24 Jan 2018 08:40:08 GMT harsmarvania57 2018-01-24T08:40:08Z HEC token management for HA https://community.splunk.com/t5/Security/HEC-token-management-for-HA/m-p/325706#M8363 <P>Hi Splunkers,</P> <P>We have a distributed environment with 2SH, 2 indexers and 1 master.<BR /> We need to set up HEC with HA. Currently my HEC is available on my indexers. <BR /> I would like to know if the indexers are restarted will there be data loss ?</P> <P>Also what factors to be considered for security?</P> <P>Below is a similar question :<BR /> <A href="https://answers.splunk.com/answers/424299/architecting-ha-in-a-small-hec-http-event-collecto.html">https://answers.splunk.com/answers/424299/architecting-ha-in-a-small-hec-http-event-collecto.html</A><BR /> Any help would be appreciated!<BR /> Thanks in advance. </P> Wed, 24 Jan 2018 07:23:20 GMT https://community.splunk.com/t5/Security/HEC-token-management-for-HA/m-p/325706#M8363 deepashri_123 2018-01-24T07:23:20Z Re: HEC token management for HA https://community.splunk.com/t5/Security/HEC-token-management-for-HA/m-p/325707#M8364 <P>Hi @deepashri_123,</P> <P>Based on documentation <A href="http://dev.splunk.com/view/event-collector/SP-CAAAE73">http://dev.splunk.com/view/event-collector/SP-CAAAE73</A>, <CODE>Note: Using HTTP Event Collector in a distributed deployment is incompatible with indexer clustering. Specifically, cluster peers are not supported as deployment clients.</CODE></P> <P>So in this case you require Heavy Forwarders and setup HEC on those machines.</P> Wed, 24 Jan 2018 08:40:08 GMT https://community.splunk.com/t5/Security/HEC-token-management-for-HA/m-p/325707#M8364 harsmarvania57 2018-01-24T08:40:08Z