Hi Splunkers,
I have the following doubt: suppose I have a scenario where data are collected by Universal forwarders, that forward them to a cluster of HF.
This cluster is, of course, created to grant HA.
The primary HF goes down, so the UFs start to senda data to secondary; the time need by UF to get the primary down and starts to send data to secondary is known/calculable?
