HI
I have splunk with Cisco estreamer eNcore App for ONE FMC, it works fine for single FMC
BUT , i have four fmc in netowrk .
how i add multiple fmc in one splunk
please help me
thanks
Hi @hr_t2000,
Unfortunately eStreamer client supports connection to only one FMC. You should use separate Splunk Heavy Forwarder instances for each FMC.
If this reply helps you , an upvote is appreciated.
thanks for reply
excuse me , are you sure ?
Because , this link
said it possible .🙄😕
Yes, it is an option but that way it becomes custom solution, upgrades and debugging may be a problem. I used eStreamer app and noticed performance problems on python if there is high volume of data. That is why if you run 4 instance on the the same host, it may be nightmare.