Hello,
Just looking for some feedback, specifically if using a heavy forwarder is the right solution. The heavy forwarder will be collecting data from the production, test and dev VPC's and forwarding it over the VPN to the receivers. On the other end of the VPN is a cluster master, (3) indexers and a deployment server. I plan on installing the Splunk Add-on for AWS on the forwarder. Does this make sense or does anyone have a better solution? Thanks in advance.
![alt text][1]
[1]: /storage/temp/251018-capture.png
↧