...outeandfilterdatad. Or by directly setting the _TCP_ROUTING with inputs.conf on the UF. In outputs.conf we configure the two different destinations as in the example below. We see that in all Splunkdoc e...
Hi,
Can someone share with me the recent inputs & outputs conf file for SSL encryption? I am having some trouble for securing the connection between forwarder and indexer.
...cpout:splunk]
server = indexer1:9997,indexer2:9997
I can see the client has successfully downloaded the outputs.conf file from the deployment server:
/opt/splunkforwarder/etc/apps/secure/outputs.conf...
I have inherited a SPlunk environment and one thing i've noticed is that one all of our heavy forwarders are using useACK. Is this best practice? we are seeing duplicate events due to this, and...
...s set up as a Deployment Server as well) to pull the app that contains the testing SSL configuration for outputs.conf, certain devices do not hash the sslPassword when the UF restarts, while others d...
...o ensure it had a custom outputs.conf if I am "sending" to the same system. Since it is acting as in indexer, wouldn't it immediately pull the data and then index it without needing a /local/outputs...
Hi,
I have a new indexer that is ready to be used. My question is how do I get my hundreds of FWD's to pick it up? We have an app that controls the outputs.conf, but even if I update it, will t...
I was wondering if I can use our deployment server to change the outputs.conf on our windows universal forwarders so they point to another indexer if needed to.. is there any standard practice for d...
We were running some load over the weekend, and ran into an issue where one of our Forwarder nodes went unresponsive. We are now attributing it to a large mazQueueSize in outputs.conf, all Indexer n...
On the outputs.conf of the forwarder we use sslPassword , sslCertPath and sslRootCAPath while the inputs.conf refers to the same exact configurations via password , serverCert and r...