Saved Bookmarks
| 1. |
What are the advantages of getting data into a Splunk instance through Forwarders? |
|
Answer» Data entering into Splunk instances VIA forwarders has MANY advantages including bandwidth throttling, a TCP connection, and an encrypted SSL connection between the forwarder and indexer. By default, data forwarded to the indexers are also load-balanced, and if one indexer goes down for any reason, that data can always be routed to another indexer instance in a very short amount of TIME. FURTHERMORE, the forwarder stores the data events locally before forwarding them, CREATING a temporary backup of the data. |
|