span index over multiple indexers

[renems]

Hi, question:

can I span one index over multiple indexers without using clustering? If so, how? 🙂
TY!

[renems]

Thank you!

[alacercogitatus]

If I have answered your questions, please accept my answer above. Thanks!

[gfuente]

Hello

Of course you can, you only need to create the same index in several indexers, and then configure your UF to send data to all of them.

regards

[alacercogitatus · Accepted solution]

Each index can be configured for each indexer, just include it in the definitions. Then use forwarders that use both indexers, Splunk will automatically split the traffic between the indexers configured.

http://docs.splunk.com/Documentation/Splunk/6.0/Deploy/Distributedoverview