search

splunk / splunk-connect-for-kubernetes

Helm charts associated with kubernetes plug-ins
Apache License 2.0
344 stars 270 forks source link

Can HEC be configured to talk to 2 indexers? #829

Closed achilu closed 1 year ago

achilu commented 1 year ago

Can HEC be configured to talk to 2 or more indexers? Per the below template, we pass 1 host ..can we pass an array ? global: splunk: hec: protocol: https insecureSSL: true token: ** host: ... port: * indexName: *****

example as below? global: splunk: hec: protocol: https insecureSSL: true token: ** host

hvaghani221 commented 1 year ago

No, it can be configured to send to one indexer only. Is there any specific requirements for sending events to multiple host?

achilu commented 1 year ago

with multiple indexers being available sending events to only one host can overload it right?

github-actions[bot] commented 1 year ago

This issue is stale because it has been open for 30 days with no activity.

eperezvcc commented 1 year ago

@achilu can you use a load balancer to point to? or a service if you are on kubernetes? something that somehow would distribute the load coming from the forwarders.

github-actions[bot] commented 1 year ago

This issue is stale because it has been open for 30 days with no activity.

github-actions[bot] commented 1 year ago

This issue was closed because it has been inactive for 14 days since being marked as stale.