topic Does Splunk recommend not to use a load balancer between a forwarder and indexer? in Getting Data In

Does Splunk recommend not to use a load balancer between a forwarder and indexer?

AzmathShaik — Thu, 02 Mar 2017 20:19:12 GMT

Hello

i was trying to implement a load balancer in between a forwarder and indexer. but i somehow remember that Splunk doesn't recommend this option. is there any statement provided in documentation?

if any one points to that would be really helpful.

Thanks

Re: Does Splunk recommend not to use a load balancer between a forwarder and indexer?

somesoni2 — Thu, 02 Mar 2017 20:35:06 GMT

See the note at the end of para 1 here.

https://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/Configureloadbalancing

Note: You should not use an external load balancer to implement load balancing between forwarders and receivers. This practice does not generate the results you would expect. Use the load balancing capability that comes with the forwarder.

Re: Does Splunk recommend not to use a load balancer between a forwarder and indexer?

AzmathShaik — Thu, 02 Mar 2017 20:37:45 GMT

Thanks it really helped me. i missed the note when i was referring the this document.

Re: Does Splunk recommend not to use a load balancer between a forwarder and indexer?

bhavikbhalodia — Tue, 21 May 2019 07:19:46 GMT

Can you please explain what does below sentence represent?
This practice does not generate the results you would expect.