HF or on each Indexer in an IC
NEVER an SH .. unless you're talking an all-in-one deployment
July 06, 2020 at 09:54AM
via reddit https://www.reddit.com/r/Splunk/comments/hk3sea/should_the_splunk_http_event_collector_be/fx3kn2c?utm_source=ifttt
HF or on each Indexer in an IC
NEVER an SH .. unless you're talking an all-in-one deployment
July 06, 2020 at 09:54AM
via reddit https://www.reddit.com/r/Splunk/comments/hk3sea/should_the_splunk_http_event_collector_be/fx3kn2c?utm_source=ifttt