I am getting the message
Forwarding to indexer group default-autolb-group blocked for 100 seconds
I am running a single search head with two indexers and 42 Universal Forwarders. I have `[tcpout]` and `[tcpout:default-autolb-group]` configured in Splunk\etc\system\local\outputs.conf. on the search head with `server=` pointing to the two indexers. My question is, do I need to have autoLB defined on the search head?
↧