hi - we are setting up SNMP modular input and we wanted to know if
1. in a distributed deployment, we can set up the 1 indexer as snmp manager?
2. if we get to setup the indexer as snmp manager, will the events get replicated to other indexer?
A best practice would be to install the SNMP Mod Input on a Forwarder and then forward collected events into your indexer cluster.
View solution in original post