Knowledge Management

Best practice for load-balancing Splunk for SOURCEfire events

edbolton
Explorer

What is the best practice for using this app in a load-balanced cluster? Is it possible to make an intermediate forwarder the eStreamer client and then load-balance the events over multiple indexers?

0 Karma
1 Solution

edbolton
Explorer

"Is it possible to make an intermediate forwarder the eStreamer client and then load-balance the events over multiple indexers?"

Yes.

View solution in original post

0 Karma

edbolton
Explorer

"Is it possible to make an intermediate forwarder the eStreamer client and then load-balance the events over multiple indexers?"

Yes.

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!