Splunk indexers cluster

itzikshviro · ‎07-20-2019

Hi,
I have a lab setup with 1 SH, 1 Master node, 2 indexers peers.
My question is, which one of the indexers should act as the receiving server (from light forwarders).
Both of them?

Thanks

ddrillic · ‎07-20-2019

Both of them - no doubt ; -)

richgalloway · ‎07-20-2019

Yes. All forwarders should should have all indexers configured or use Indexer Discovery.

---
If this reply helps you, Karma would be appreciated.

Splunk indexers cluster

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Quick connection discovery mode for forwarders

Build and Launch AI Agents from Your Splunk Workflows

Splunk Cloud Application Management in Terraform

Join the Conversation

Splunk indexers cluster

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Quick connection discovery mode for forwarders

Build and Launch AI Agents from Your Splunk Workflows

Splunk Cloud Application Management in Terraform