If i have 2 Datacenter sites, each with its own single indexer.
Can I setup up my forwarders in site1 to forward to indexersite1 as default, but if indexersite1 goes down can it then forward to indexer_site2. And vice versa for splunk forwarders in site2.
Hope that makes sense, in other works I always want my forwarders to log to their local indexer unless that local indexer in in contactable.
I presume this is a config in outputs.conf, any help would be appreciated.