Would it be wise to set up redundant forwarders or is one sufficient?
Hi phainlen,
It's really going to come down to what your high-availbility & fault tolerance requirements are. I put a rundown of possible redundant configurations in this post: http://splunk-base.splunk.com/answers/52381/forwarder-redundancy
Hope it's of some help.
