Splunk - Windows Network Load Balancing

gdavid · ‎07-17-2012

I currently only have a single splunk server, but i would like to break it out to a distributed setup. I have been wondering how to setup the network devices to forward syslog to a load balanced IP, so i dont lose any data during reboots etc. The easiest quickest way for me is windows network load balance. Does anyone else have experience with a setup like this?

is there a way to forward to 2 splunk servers and have it figure out that it's duplicate data and store only once?

StylusPilot · ‎12-04-2012

How did you go with this?

I'm looking for documentation on the same thing.

gdavid · ‎12-27-2012

no answers on this, i also have not had a chance to try it out yet.

Splunk - Windows Network Load Balancing

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Join the Conversation

Splunk - Windows Network Load Balancing

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas