I want to have two heavy forwarders set up to receive the same syslog data at the same time. If one fails the other will carry the load. Both will stream data into one Index with the load spread across multiple Indexer hosts. What methods can be applied to de-duplicate the same data flowing in from the two forwarders or can you suggest a better option? Thanks! ... View more

Our company has an Enterprise License for Splunk. We have scripted the install for upgrade and for fresh implementations of Splunk 5. However, the acceptance of the End User License agreement is causing our scripts to fail. In versions prior to Splunk 5 we used the following commands from a shell script: $SPLUNK_HOME/bin/splunk start --accept-license --answer-yes Now it fails to accept the license during script run time. Is there an updated command set to continue past the license acceptance? Or.. Does anyone know of a scripted method to work around this problem? Thank you! ... View more