I have configured our cluster master to receive log in certain port and also configured the cluster master to forward to two indexer nodes.
Now we have universal forwarder installed in few servers from which we need to send the logs to cluster master instead of directly sending to two indexer nodes. Can I directly configure the output conf to point to the cluster master ip and receiver port? or is there anything I need to configure specifically for this in cluster master?
... View more