Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?

Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
A . _TCP_ROUTING
B . _INDEXER_LIST
C . _INDEXER_GROUP
D . _INDEXER ROUTING

Answer: A

Explanation:

https://docs.splunk.com/Documentation/Splunk/7.0.3/Forwarding/Routeandfilterdatad#Perform_se lective_indexing_and_forwarding

Specifies a comma-separated list of tcpout group names. Use this setting to selectively forward your data to specific indexers by specifying the tcpout groups that the forwarder should use when forwarding the data. Define the tcpout group names in the outputs.conf file in [tcpout:<tcpout_group_name>] stanzas. The groups present in defaultGroup in [tcpout] stanza in the outputs.conf file.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments