topic Re: Is it possible to configure cloning AND autoLB simultaneously? in Getting Data In

Is it possible to configure cloning AND autoLB simultaneously?

the_wolverine — Fri, 12 Feb 2010 08:25:09 GMT

I have a light forwarder sending data to my indexer. I'm bringing two new Splunk indexers online and want to use autoLB to send my data to these new indexers. However, I have a requirement that I need to continue sending to my original indexer.

Is it possible to do this?

Re: Is it possible to configure cloning AND autoLB simultaneously?

the_wolverine — Fri, 12 Feb 2010 08:28:45 GMT

Here's a sample configuration which tells Splunk to forward data to 2 groups. The first tcpout stanza is a standalone indexer. The 2nd tcpout stanza is a group of 2 servers:

outputs.conf:

[tcpout]
defaultGroup = indexer1, autoLB_Group

[tcpout:indexer1]
server = IP:<port>

[tcpout:autoLB_Group]
server = IP_autoLBserver1:<port>, IP_autoLBserver2:<port>
autoLB = true
autoLBFrequency = 30

Re: Is it possible to configure cloning AND autoLB simultaneously?

jrodman — Fri, 12 Mar 2010 11:20:08 GMT

Optionally, both output groups can be autoLB groups, though obviously your usecase was the above.

Re: Is it possible to configure cloning AND autoLB simultaneously?

ben_leung — Mon, 28 Sep 2020 19:05:35 GMT

http://answers.splunk.com/answers/77591/data-cloning-is-it-a-exact-clone.html

Need to add in inputs.conf on the forwarder, for the above example...

_TCP_ROUTING = indexer1, autoLB_Group

Re: Is it possible to configure cloning AND autoLB simultaneously?

the_wolverine — Mon, 28 Sep 2020 19:14:19 GMT

The _TCP_ROUTING would be needed if the outputs.conf "defaultGroup" were not configured to clone.