https://community.splunk.com/t5/Getting-Data-In/What-is-the-recommended-architecture-for-a-Windows-universal/m-p/166170#M33698 <P>Splunk has an auto load-balancing capability, <A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Configureforwarderswithoutputs.conf">http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Configureforwarderswithoutputs.conf</A></P> <P>But without knowing all the details of your environment and requirements, this may be the recommended approach. </P> Wed, 12 Aug 2015 00:55:07 GMT sduff_splunk 2015-08-12T00:55:07Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-recommended-architecture-for-a-Windows-universal/m-p/166169#M33697 <P>What's the recommended best practice to architect a Windows universal forwarder to an indexer cluster? Is it better to forward all the Windows UF data to a VIP or just have them go straight to the indexers?</P> Tue, 11 Aug 2015 17:48:29 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-recommended-architecture-for-a-Windows-universal/m-p/166169#M33697 splunkDude2015 2015-08-11T17:48:29Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-recommended-architecture-for-a-Windows-universal/m-p/166170#M33698 <P>Splunk has an auto load-balancing capability, <A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Configureforwarderswithoutputs.conf">http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Configureforwarderswithoutputs.conf</A></P> <P>But without knowing all the details of your environment and requirements, this may be the recommended approach. </P> Wed, 12 Aug 2015 00:55:07 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-recommended-architecture-for-a-Windows-universal/m-p/166170#M33698 sduff_splunk 2015-08-12T00:55:07Z