Forward events to a subset of indexers cluster

[jonwick]

Hi Splunkers,

Is it possible to send events to subset of indexers among the indexers of a cluster ....for load balancing???

Other indexers are in different network and don't want to punk firewall....and not inclined to use gateway forwarders as well.

[richgalloway · Accepted solution]

Give each forwarder a set of indexers in outputs.conf and those will be the only indexers it uses.

You also can use the _TCP_ROUTING option in inputs.conf to send certain data to certain indexers.

[jonwick]

Thanks @richgalloway