I have suspicious that my outputs.conf configuration files are causing some unwanted data cloning in my forwarders. I am trying to make sense of some weird behavior I am observing, I am hoping s...
I was wondering if I can use our deployment server to change the outputs.conf on our windows universal forwarders so they point to another indexer if needed to.. is there any standard practice for d...
We were running some load over the weekend, and ran into an issue where one of our Forwarder nodes went unresponsive. We are now attributing it to a large mazQueueSize in outputs.conf, all Indexer n...
I've got my universal forwarders and heavy forwarders doing indexer discovery through the cluster master like so ... **************************
* outputs.conf...
Hi,
I have a new indexer that is ready to be used. My question is how do I get my hundreds of FWD's to pick it up? We have an app that controls the outputs.conf, but even if I update it, will t...
...s set up as a Deployment Server as well) to pull the app that contains the testing SSL configuration for outputs.conf, certain devices do not hash the sslPassword when the UF restarts, while others d...
We use the following just fine -
[tcpout]
defaultGroup = indexers
[tcpout:indexers]
server = <indexer>:9997
The admin guide for the certification also mentions -
[tcpout-server:/...
...o ensure it had a custom outputs.conf if I am "sending" to the same system. Since it is acting as in indexer, wouldn't it immediately pull the data and then index it without needing a /local/outputs...
On the outputs.conf of the forwarder we use sslPassword , sslCertPath and sslRootCAPath while the inputs.conf refers to the same exact configurations via password , serverCert and r...