We are using SPLUNK AWS TA to ingest logs from our AWS S3 bucket.
Everything was working fine until when i try to forward our splunk logs to our customer using the Forwarder configuration under Forwarding and Receiving.
Once i enabled the forwarding of my customer IP/Port xxx.xxx.xxx.xxx:9999, the AWS S3 bucket ingestion will stop working.
However, once i delete away the configuration above, everything starts working fine again.
Our environment has 2 x indexer under a cluser setup and the Splunk AWS TA apps was installed in one of our Indexer.
I can't seems to find any issue by going through the logs.
Can someone point to me what could be the likely issue here ?