Can 1 indexer in a distributed deployment be SNMP manager?

[teddyidc1101]

hi - we are setting up SNMP modular input and we wanted to know if
1. in a distributed deployment, we can set up the 1 indexer as snmp manager?
2. if we get to setup the indexer as snmp manager, will the events get replicated to other indexer?

thanks!

[Damien_Dallimor · Accepted solution]

A best practice would be to install the SNMP Mod Input on a Forwarder and then forward collected events into your indexer cluster.