Quantcast
Channel: Questions in topic: "universal-forwarder"
Viewing all articles
Browse latest Browse all 1551

What does Splunk do when one index in an indexer has reached maximum capacity?

$
0
0
Hi all, I'm currently having problem with the storage in one of my indexer. Here's the brief summary of my condition: - 1 Search Head instance - 3 Indexer instances - Several Universal Forwarders, configured to send data to all 3 indexers in load-balance mode Among the indexes that I have in all indexers, one index (let's say "SMS") in Indexer B has already reached the maximum given bucket size. **My question is as follows**: If the forwarders keep sending the data in load-balance mode to all indexers, will the forwarders skip sending the data to index "SMS" in indexer B as the maximum capacity has been reached? Thanks in advance. Best Regards, Vincent

Viewing all articles
Browse latest Browse all 1551

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>