Splunk Cloud Platform

Does having two tcpout outputs defined effectively double the throughput being measured when maxKBps is exceeded and throttling takes place?

chanfoli
Builder

We are in a transition phase with Splunk Cloud and forwarding to Splunk Cloud index endpoints as well as an on-prem indexer cluster. Does having two tcpout outputs defined effectively double the throughput being measured when maxKBps is exceeded and throttling takes place?

This is mostly relating to Universal Forwarders as they have a default of 256 KB/s (as does the app that splunk cloud provided for forwarding to splunk cloud).

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...