Hello in our environment we are already using UF on 15K servers, but they are sending logs to Indexer cluster on default port and without any compression.
We now need to enable SSL compression on them to save bandwidth. For this we would be using different port than default one.
But what i need to know is if we enable ssl compression in outputs.conf of all servers what will happen where server does not have connectivity to indexers on that port. will it break logs being sent to indexer or will it fall back to sending uncompressed data on default port?
