Getting Data In

how and when does the UF check in with the Cluster Node

jcorcorans
Engager

how and when does the UF check in with the Cluster Node to see what indexers are available.

 

thank You,

spent some time on searching, No joy.

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Forwarders send requests to the Cluster Manager for a list of available indexers.  The requests are sent at adjustable intervals.  See https://docs.splunk.com/Documentation/Splunk/9.3.0/Indexer/indexerdiscovery#How_indexer_discovery_wo...for details.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Forwarders send requests to the Cluster Manager for a list of available indexers.  The requests are sent at adjustable intervals.  See https://docs.splunk.com/Documentation/Splunk/9.3.0/Indexer/indexerdiscovery#How_indexer_discovery_wo...for details.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...