- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have a doubt here..I want to index data to both sandbox and production. What changes do I need to make here.
[tcpout]
defaultGroup = production
[tcpout:sandbox]
server=ABC:PORT
[tcpout:production]
server=XYZ:PORT
autoLB = true
useACK = false
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![gcusello gcusello](https://community.splunk.com/legacyfs/online/avatars/553812.jpg)
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
Hi rangineniarunkumar,
just a little additional information:
- are sandbox and production indexers?
- do you want to send some logs to sandbox and some logs to production?
If this is your need, you should see at http://docs.splunk.com/Documentation/Splunk/6.5.2/Forwarding/Routeandfilterdatad where it's described how to configure your outputs.conf and inputs.conf files.
At first sight I see [default group] stanza in your outputs.conf and you should remove it.
In addition you have to insert in all your inputs.conf files stanzas _TCP_ROUTING = sandbox
or _TCP_ROUTING = production
depending by your logs.
If you want to send the same log to both the indexers you don't need to insert _TCP_ROUTING =
Bye.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![gcusello gcusello](https://community.splunk.com/legacyfs/online/avatars/553812.jpg)
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
Hi rangineniarunkumar,
just a little additional information:
- are sandbox and production indexers?
- do you want to send some logs to sandbox and some logs to production?
If this is your need, you should see at http://docs.splunk.com/Documentation/Splunk/6.5.2/Forwarding/Routeandfilterdatad where it's described how to configure your outputs.conf and inputs.conf files.
At first sight I see [default group] stanza in your outputs.conf and you should remove it.
In addition you have to insert in all your inputs.conf files stanzas _TCP_ROUTING = sandbox
or _TCP_ROUTING = production
depending by your logs.
If you want to send the same log to both the indexers you don't need to insert _TCP_ROUTING =
Bye.
Giuseppe
![](/skins/images/FE4825B2128CA5F641629E007E333890/responsive_peak/images/icon_anonymous_message.png)