All Apps and Add-ons

Can 1 indexer in a distributed deployment be SNMP manager?

Communicator

hi - we are setting up SNMP modular input and we wanted to know if
1. in a distributed deployment, we can set up the 1 indexer as snmp manager?
2. if we get to setup the indexer as snmp manager, will the events get replicated to other indexer?

thanks!

0 Karma
1 Solution

Ultra Champion

A best practice would be to install the SNMP Mod Input on a Forwarder and then forward collected events into your indexer cluster.

View solution in original post

Ultra Champion

A best practice would be to install the SNMP Mod Input on a Forwarder and then forward collected events into your indexer cluster.

View solution in original post