I would like to know how to work the CLI command "splunk list forward-server" in Universal Forwarder which is enabled load balance.
In my opiniton, I wonder that Active forwards would be showed two indexer IP addresses. while there is just one IP address of indexer which is returned as result by the CLI command "splunk list forward-server" , and there is another indexer IP address in "Configured but inactive forwards:".
Is it correct result?
Also what is the best way to enable "load balance" in UF if it is not showed all in "Active forwards:".