Hi Splunkers,
Is it possible to send events to subset of indexers among the indexers of a cluster ....for load balancing???
Other indexers are in different network and don't want to punk firewall....and not inclined to use gateway forwarders as well.
Give each forwarder a set of indexers in outputs.conf and those will be the only indexers it uses.
You also can use the _TCP_ROUTING option in inputs.conf to send certain data to certain indexers.
Give each forwarder a set of indexers in outputs.conf and those will be the only indexers it uses.
You also can use the _TCP_ROUTING option in inputs.conf to send certain data to certain indexers.
Thanks @richgalloway