diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf new file mode 100644 index 0000000..658f61e --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf @@ -0,0 +1,9 @@ +[install] +state = enabled + +[package] +check_for_update = false + +[ui] +is_visible = false +is_manageable = false \ No newline at end of file diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf new file mode 100644 index 0000000..bba60aa --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf @@ -0,0 +1,12 @@ +[tcpout] +defautlGroup = primary_indexers +maxQueuSize = 100MB +useACK = true +forceTimebaseAutoLB = true +forwardedindex.2.whitelist = (_audit|_introspection|_internal) + +[tcpout:primary_indexers] +server = SVLCTPLOGIDX01.mom.fr:9997, SVLCTPLOGIDX02.mom.fr:9997 + +#clientCert = $SPLUNK_HOME/etc/auth/server.pem +#sslPassword = diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf new file mode 100644 index 0000000..e05e21c --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf @@ -0,0 +1,2 @@ +[sslConfig] +sslRootCAPath = $SPLUNK_HOME/etc/auth/ca.pem \ No newline at end of file