https://community.splunk.com/t5/Getting-Data-In/Can-a-single-UF-forwards-data-to-multiple-HF-s/m-p/328912#M61035 <P>Is it possible to send data from universal forwarder to multiple heavy forwarders?<BR /> if yes how can specify the HF group. </P> Wed, 06 Dec 2017 08:07:41 GMT manikanta66 2017-12-06T08:07:41Z https://community.splunk.com/t5/Getting-Data-In/Can-a-single-UF-forwards-data-to-multiple-HF-s/m-p/328912#M61035 <P>Is it possible to send data from universal forwarder to multiple heavy forwarders?<BR /> if yes how can specify the HF group. </P> Wed, 06 Dec 2017 08:07:41 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-single-UF-forwards-data-to-multiple-HF-s/m-p/328912#M61035 manikanta66 2017-12-06T08:07:41Z https://community.splunk.com/t5/Getting-Data-In/Can-a-single-UF-forwards-data-to-multiple-HF-s/m-p/328913#M61036 <P>Hi,</P> <P>Yes you can forward it to multiple HF. You need to do configuration in outputs.conf as below</P> <PRE><CODE>[tcpout] defaultGroup = HF_GRP_1, HF_GRP_2 disabled = false [tcpout:HF_GRP_1] server = 10.10.0.1:9997,10.10.0.2:9997 [tcpout:HF_GRP_2] server = 10.20.0.1:9997,10.20.0.2:9997 </CODE></PRE> <P>Above configuration will forward all data to both the HF groups, if you have any specific requirement to route subset of data to different HF group then please provide more details.</P> Wed, 06 Dec 2017 08:43:17 GMT https://community.splunk.com/t5/Getting-Data-In/Can-a-single-UF-forwards-data-to-multiple-HF-s/m-p/328913#M61036 harsmarvania57 2017-12-06T08:43:17Z