I have a complex system which sometimes needs to be debugged or troubleshooted by using verbose trace logs.
the challenges in my scenario are:
the verbose logs grow fast, in the order to 5Mb - 20mb per minute.
the machines producing the logs are also cpu constrained, as they run cpu intensive tasks
the machines producing the logs are located at a remote client location (we have many clients), these are far(bandwidth is limited) from the location where we host the main splunk indexer
what would be a good topology in this case?
... View more