I have multiple XIO clusters and each has a unique hostname. Can I configure the EMC XtremIO Add-on for Splunk Enterprise with multiple hostnames on a single forwarder, or do I need to configure separate forwarders w/ the add-on for each XIO cluster that I wish to collect from?
Thanks in advance...
You can configure the single forwarder to collect data from multiple XIO Clusters.
Thanks,
Pankaj
Can you elaborate on how to do so?
After installing the Add-on app successfully, follow the below procedure for as many clusters as you want to get indexed:
Go to the Manage Apps -> click on "Setup" for EMC XtremIO Add-on -> Add credential for your XIO Cluster -> Save.
Check some of the entries are created in TA_EMC-XtremIO /local/inputs.conf for each Cluster (optional)
Thanks,
Pankaj