Hi,
My client needs High Availability in the heavy forwarders.
They are collecting events from devices on a datacenter and sending to the indexer in another datacenter.
Those events are sent through a Heavy Forwarder. So they need that HF to have HA.
Is there a way to ceate a cluster of the Heavy forwarders so in case one is down, the other starts getting the events and sending them to the indexer?
If not, how can we achieve HA in this architecture?
Thank you very much
↧