Hello,
I googled around for similar questions but could not find anything, so I'm sorry if this question has already been asked before. If i want to index large amounts of data using multiple forwarders, is there some way where i can configure the various forwarders to act in a distributed fashion? I know of managing pipelines for index parallelization (https://docs.splunk.com/Documentation/Splunk/7.1.2/Indexer/Pipelinesets), but that still does not quite solve the issue.
What do people in general do to solve such a problem? Thank you!
↧