Hello there, i've a distribuited deployment with a SH and INDX. i've installed DB Connect on the SH and created an input to send data from SH to indexer, i've select an index that's on the INDX but the index have no data.
How can i solve this issue?
Hi @marziaolla
You need to configure outputs.conf to send data to indexer like in the normal case as mentioned in https://docs.splunk.com/Documentation/Splunk/7.1.1/DistSearch/Forwardsearchheaddata
