All Apps and Add-ons

Splunk App for CEF: Configuring two outputs in an output group, does this send all data via syslog to both endpoints, or does it load balance between the two?

joshclarkA
New Member

Configuring two outputs in an output group, does this send all data via syslog to both endpoints or does it load balance between the two?

Tags (1)
0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

good question -- I think the default is to load balance because it's setting the defaultGroup value, but you've got a lot of options if you're willing to edit the file. http://docs.splunk.com/Documentation/Splunk/6.3.0/Forwarding/Configureforwarderswithoutputs.confd

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...