Forwarding to indexer group default-autolb-group blocked for 100 seconds
I am running a single search head with two indexers and 42 Universal Forwarders. I have [tcpout] and [tcpout:default-autolb-group] configured in Splunk\etc\system\local\outputs.conf. on the search head with server= pointing to the two indexers. My question is, do I need to have autoLB defined on the search head?
It looks to me that on the outputs.conf documentation, load balancing is defined for forwarders. My question concerns the search head, Is load balancing needed on a single search head with 2 indexers? In other words, can I remove the load balancing configuration and stop the message.