In previous versions of Splunk DB Connect (2.2 and 2.4), dbx was running in a Search Head cluster, with all advantages of a cluster (replication etc). With Splunk DB Connect 3.0.2, the advice is to run on a Heavy Forwarder, however, there are no options for redundancy, at least, I cant find them in the docs. Anyone run into this ??? Any updates would be appreciated.
↧