Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Can a Splunk 6.3 heavy forwarder send data to a 6....
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I have a multi-part question. First, can a 6.3 Heavy Forwarder sent to a 6.1 indexer? And second, can I use the index parallelization functionality on the 6.3 HFW to send this data? (Might be called serialization?). My scenario is that I have a layer of HFWs which collect syslog and tcp data from a load-balancer. I get a lot of traffic from these feeds. I was wondering if using 6.3 and enabling the multi-pipeline functionality would increase my throughput. (Or at the very least, allow me to take advantage of unused cycles on these vm's).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ah, RTFB, my all time favorite. (Joking)...
Seriously though, I installed it, is there a way to validate the number of pipelines in use?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
🙂 🙂 🙂 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Found it - from splunkd.log:
11-16-2015 21:54:38.245 -0500 INFO PipelineComponent - Launching the pipelines for set 0.
11-16-2015 21:54:38.245 -0500 INFO PipelineComponent - Launching the pipelines for set 1.
11-16-2015 21:54:38.245 -0500 INFO PipelineComponent - Launching the pipelines for set 2.
Community Content Calendar, September edition
Splunkbase Unveils New App Listing Management Public Preview
Leveraging Automated Threat Analysis Across the Splunk Ecosystem
