Hi, thank you. However, i can't directly send my data to indexers since we use Splunk Cloud. That won't be 100% secure. Does DBconnect works well in a SHC? Can't I configure HFC as a SHC? BR. ... View more

Hello, Did you find a solution to your architecture? I want to do the same thing to my client with HFs cluster ACTIVE-ACTIVE . I have DBConnect installed in my HF and i don't want to replicate the data. Can you please help me? BR. ... View more

Hello i Have the same problem. my Heavy forwarder is restarting unexpectedly at least 2 times a day. crash.log file specifies the thread :  "Received fatal signal 6 (Aborted) on PID 13698. Cause: Signal sent by PID 13698 running under UID 0. Crashing thread: TcpOutEloop" Did you manage to solve the problem please? ... View more

Hello, I have the Same issue, since i started monitoring my log files on an other splunk server. Did you manage to solve your problem?   BR, Fatma. ... View more

That does not work for me: Here is more explanation of the problem: I have db connect input scheduled at 0 8 * * * But they only appres in splunk index at 0 9 * * * , and that problem appears since the daylight savings (yesterday).     ... View more

Hello, did you manage to solve your problem? I have the same issue. ... View more