Hi,
I have a multi-part question. First, can a 6.3 Heavy Forwarder sent to a 6.1 indexer? And second, can I use the index parallelization functionality on the 6.3 HFW to send this data? (Might be called serialization?). My scenario is that I have a layer of HFWs which collect syslog and tcp data from a load-balancer. I get a lot of traffic from these feeds. I was wondering if using 6.3 and enabling the multi-pipeline functionality would increase my throughput. (Or at the very least, allow me to take advantage of unused cycles on these vm's).
↧