sd,Hello,
I have the Splunk App for NewRelic installed on my search head and wanted to forward the incoming data to one of the indexer and back to the search head. I'm trying to use TCP routing under inputs.conf for the NewRelic app and it's not working for me. However, trying the same approach with the DB connect app works just fine.
The command I'm using in inputs.conf:
index = [my index]
_TCP_ROUTING = [my indexer]
Not sure why this approach is not working for NewRelic. Can anyone please advise?