We are using a splunk indexer cluster in AWS using autoscaling to increase the cluster size. Universal forwarders are configured with the indexers IPs. When a new indexer gets launched how to update the Universal forwarders. Is it recommended to use the ELB for the indexers? Can we use deployment server to handle this?
↧
Indexer cluster autoscaling, how to configure universal forwarders with the new indexer endpoints.
↧