https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46724#M8822 <P>You will get 2 events - both indexers will faithfully index the data that is sent to them.</P> Mon, 27 May 2013 17:14:18 GMT Ayn 2013-05-27T17:14:18Z https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46723#M8821 <P>Hi,</P> <P>I have syslog messages being sent to two different servers. Each server should receive the same events. If the configuration is the same, will I receive 2 events for each syslog entry, or will Splunk make some effort to deduplicate them?</P> Mon, 27 May 2013 16:17:43 GMT https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46723#M8821 a212830 2013-05-27T16:17:43Z https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46724#M8822 <P>You will get 2 events - both indexers will faithfully index the data that is sent to them.</P> Mon, 27 May 2013 17:14:18 GMT https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46724#M8822 Ayn 2013-05-27T17:14:18Z https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46725#M8823 <P>you can however use the 'dedup' command when searching if you actually have to index the events twice.</P> Mon, 27 May 2013 19:19:40 GMT https://community.splunk.com/t5/Getting-Data-In/duplicate-feed-duplicate-events/m-p/46725#M8823 piebob 2013-05-27T19:19:40Z