Which port do we use to forward data from a HF to indexer, when we already have multiple UF sending logs to HF on port 9997?

[Akhilprakash]

UFs ---9997---> HF --- 9997---> Indexers

We have above structured architecture, where multiple UF will send logs to HF and HF will forward those logs to Indexer.
HF is configured to receive logs from UF on port 9997, Now which port I have to use to forward data from HF to indexer?

[woodcock · Accepted solution]

Your configuration is just fine as-is, assuming you are sticking with the defaults.

[Akhilprakash]

Sticking with the defaults as we are receiving and sending on port 9997 from HF. But will there be any conflict when both receiving and sending happens on the same port?

[FrankVl]

The HF won't be sending from 9997, it will send from some random port, to port 9997 on the Indexers. Network traffic doesn't travel 'on' a port, it travels from a source port to a destination port.