Getting Data In

How to configure outputs.conf on a forwarder to route logs to different sets of indexers?

New Member

We have single server where we installed a Splunk forwarder and we want to configure outputs.conf such a way that certain logs will be sent to one set of indexers and certain logs have to be sent to different indexers.

0 Karma

Revered Legend
0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...