i have a dev and prod setup.
We cannot have UF agent installed on splunk infra servers , as splunk does not support it.
so we have setup a way to collect capacity/cpu/mem data just like uf agent for our splunk servers.
now we have production server data in the production indexers and dev server data on dev indexers.
but we are showing it on a report that is there on production.
so we have a situation to send the dev indexers data to production indexers( index=test) for showing the capacity data for development also on production report.
what is the best way to send selective index (index=test) from dev indexer to production indexers( index=test) so that our production report can see both the data.
↧