Can I configure the EMC XtremIO Add-on for Splunk Enterprise with multiple hostnames (XIO Clusters) on a single forwarder?

[mrulf]

I have multiple XIO clusters and each has a unique hostname. Can I configure the EMC XtremIO Add-on for Splunk Enterprise with multiple hostnames on a single forwarder, or do I need to configure separate forwarders w/ the add-on for each XIO cluster that I wish to collect from?

Thanks in advance...

[pjvarjani]

You can configure the single forwarder to collect data from multiple XIO Clusters.

Thanks,
Pankaj

[mrulf]

Can you elaborate on how to do so?

[pjvarjani]

After installing the Add-on app successfully, follow the below procedure for as many clusters as you want to get indexed:

Go to the Manage Apps -> click on "Setup" for EMC XtremIO Add-on -> Add credential for your XIO Cluster -> Save.

Check some of the entries are created in TA_EMC-XtremIO /local/inputs.conf for each Cluster (optional)

Thanks,
Pankaj