Hi,
I have a Splunk forwarder sending data to my prod box and i see a need to build a new dev server for testing/researching, i have a quick question,
My output.conf on Universal Forwarder looks like:
[tcpout]
defaultGroup = default-autolb-group
[tcpout:default-autolb-group]
server = 198.11.16.1:9997
[tcpout-server://198.11.16.1:9997]
Which has Ip of my first Splunk Server, can i add another Server here and if yes how will it look ?
Is this the only file i need to edit and restart splunk forwarder to be done?
... View more