I have 4 reference servers behind a load balancer receiving less than 20gigs a day from an application source. So it's major overkill.
I want to enable collectD from about 3000 Linux hosts. I'd like to just use the same setup, so I am not wasting hardware.
Any reason why this would be a bad idea? Is there a best practice? Part of me was thinking I should create another HEC instance on another port to separate things. But I shouldn't need to do that right? I can just just use props.conf?
@daniel333 - I'm also having trouble following what's going on. Specifically, if you could clarify...