Installation

License impact using load balancing

splunkreal
Motivator

Hello,

we have clustered indexers.

Could you confirm if the license usage is the same using these settings in the outputs.conf of universal forwarders :

[tcpout]
defaultGroup=indexer1,indexer2

[tcpout:indexer1]
server=10.1.1.197:9997

[tcpout:indexer2]
server=10.1.1.200:9997

I also noted it's possible to use this, however it may increase replication between indexers?

[tcpout:my_LB_indexers]
server=10.10.10.1:9997,10.10.10.2:9996,10.10.10.3:9995

Thanks a lot.

* If this helps, please upvote or accept solution if it solved *
Labels (3)
0 Karma
1 Solution

adonio
Ultra Champion

Why will it effect licensing?
License counts against data indexed in the indexers and ... that's it!
it does not count against replication, internal data etc.
read more here:
https://docs.splunk.com/Documentation/Splunk/6.6.0/InheritedDeployment/Licensing
and here:
http://docs.splunk.com/Documentation/Splunk/6.6.0/Admin/TypesofSplunklicenses
why will this configuration increase replication on indexers?
read more about outputs and forwarders load balancing here:
http://docs.splunk.com/Documentation/Forwarder/6.6.0/Forwarder/Configureforwardingwithoutputs.conf
hope it helps

View solution in original post

adonio
Ultra Champion

Why will it effect licensing?
License counts against data indexed in the indexers and ... that's it!
it does not count against replication, internal data etc.
read more here:
https://docs.splunk.com/Documentation/Splunk/6.6.0/InheritedDeployment/Licensing
and here:
http://docs.splunk.com/Documentation/Splunk/6.6.0/Admin/TypesofSplunklicenses
why will this configuration increase replication on indexers?
read more about outputs and forwarders load balancing here:
http://docs.splunk.com/Documentation/Forwarder/6.6.0/Forwarder/Configureforwardingwithoutputs.conf
hope it helps

Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...