If you have multiple pipelines, then you should have
- One tcp output processor per pipeline
- Set Multiple tcp connections from the forwarder to different indexers at the same time
Metrics.log should be able to provide you the details about the ingestion. You shall looks for the processor group in
index=_internal source="splunk_installation_folder/var/log/splunk/metrics.log"
---
What goes around comes around. If it helps, hit it with Karma 🙂
