All Apps and Add-ons

Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two?

joshclarkA
New Member

Configuring two outputs in an output group, does this send all data via syslog to both endpoints or does it load balance between the two?

Tags (1)
0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

good question -- I think the default is to load balance because it's setting the defaultGroup value, but you've got a lot of options if you're willing to edit the file. http://docs.splunk.com/Documentation/Splunk/6.3.0/Forwarding/Configureforwarderswithoutputs.confd

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!