Getting Data In

Universal Forwarder to different index server ports

fuster_j
Path Finder

Hi,

Is there any advantage to setup up Universal Forwarder to communicate different ports with index servers with load balancing instead all go to port 9997?

[tcpout]

autoLB = true

autoLBFrequency = 10

compressed = false

defaultGroup = AA

[tcpout:AA]

server = a1-abc.com:9995,b1.abc.com:9996,c1.abc.com:9997

Tags (1)
0 Karma

fuster_j
Path Finder

I'm think that each TCP session will have its own send/receive buffers. My real question is will they communicate concurrently in the load balancing mode?

0 Karma

Ayn
Legend

None at all that I can think of. Did you have an idea yourself, since you asked?

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...