What is the best way to route security events to Security Indexers and rest of the sourcetypes to operational indexers?
And Can we manage universal forwarder with 2 deployment servers?
↧