Splunk IT Service Intelligence

Load Balancing

nik_charusat
New Member

Does Universal Forwarder's load balancing work automatically in Distributed architecture without clustering?

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Load balancing in universal forwarders is automatic. You can control it using the outputs.conf settings autoLBFrequency and autoLBVolume and the props.conf settings EVENT_BREAKER and EVENT_BREAKER_ENABLE.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

nik_charusat
New Member

At what time period It does Load Balancing of Indexers?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Load balancing in universal forwarders is automatic. You can control it using the outputs.conf settings autoLBFrequency and autoLBVolume and the props.conf settings EVENT_BREAKER and EVENT_BREAKER_ENABLE.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

nik_charusat
New Member

Can you also explain what forceTimebasedAutoLB = <boolean> exactly do in output.conf file.

0 Karma