topic Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two? in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-CEF-Configuring-two-outputs-in-an-output-group/m-p/264581#M30596 <P>Configuring two outputs in an output group, does this send all data via syslog to both endpoints or does it load balance between the two?</P> Tue, 06 Oct 2015 19:34:36 GMT joshclarkA 2015-10-06T19:34:36Z Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two? https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-CEF-Configuring-two-outputs-in-an-output-group/m-p/264581#M30596 <P>Configuring two outputs in an output group, does this send all data via syslog to both endpoints or does it load balance between the two?</P> Tue, 06 Oct 2015 19:34:36 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-CEF-Configuring-two-outputs-in-an-output-group/m-p/264581#M30596 joshclarkA 2015-10-06T19:34:36Z Re: Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two? https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-CEF-Configuring-two-outputs-in-an-output-group/m-p/264582#M30597 <P>good question -- I think the default is to load balance because it's setting the defaultGroup value, but you've got a lot of options if you're willing to edit the file. <A href="http://docs.splunk.com/Documentation/Splunk/6.3.0/Forwarding/Configureforwarderswithoutputs.confd">http://docs.splunk.com/Documentation/Splunk/6.3.0/Forwarding/Configureforwarderswithoutputs.confd</A> </P> Sat, 10 Oct 2015 22:34:01 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-CEF-Configuring-two-outputs-in-an-output-group/m-p/264582#M30597 jcoates_splunk 2015-10-10T22:34:01Z