https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-have-1-forwarder-forward-data-to-2-different/m-p/130434#M26819 <P>Hi sympatiko!</P> <P>Probably tcp_routing can establish this. There are some good answers on this site on how to establish this</P> Fri, 29 May 2015 07:05:18 GMT baerts 2015-05-29T07:05:18Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-have-1-forwarder-forward-data-to-2-different/m-p/130433#M26818 <P>Hi splunkers,</P> <P>Good day! I just want to ask some opinion what is the best way I can do or is it possible to achieve this:</P> <P>I have 1 forwarder, forwarding the data to my indexer cluster rf=3 and sf=3. I'm planning to add two new indexers peering together to index different stuff. I want this forwarder to forward the data to this new group of indexers for this different purpose. </P> <P>apachelogs ---&gt; Forwarder ----&gt; indexer cluster1<BR /> systemlogs ---&gt; Forwarder -----&gt; indexer cluster2</P> <P>Thanks</P> Fri, 29 May 2015 02:59:02 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-have-1-forwarder-forward-data-to-2-different/m-p/130433#M26818 sympatiko 2015-05-29T02:59:02Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-have-1-forwarder-forward-data-to-2-different/m-p/130434#M26819 <P>Hi sympatiko!</P> <P>Probably tcp_routing can establish this. There are some good answers on this site on how to establish this</P> Fri, 29 May 2015 07:05:18 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-have-1-forwarder-forward-data-to-2-different/m-p/130434#M26819 baerts 2015-05-29T07:05:18Z