All Apps and Add-ons

Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two?

New Member

Configuring two outputs in an output group, does this send all data via syslog to both endpoints or does it load balance between the two?

Tags (1)
0 Karma

Splunk Employee
Splunk Employee

good question -- I think the default is to load balance because it's setting the defaultGroup value, but you've got a lot of options if you're willing to edit the file. http://docs.splunk.com/Documentation/Splunk/6.3.0/Forwarding/Configureforwarderswithoutputs.confd

0 Karma