add_conf_for_cluster_forwarder

Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf

@@ -0,0 +1,9 @@
+[install]
+state = enabled
+
+[package]
+check_for_update = false
+
+[ui]
+is_visible = false
+is_manageable = false

Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf

@@ -0,0 +1,12 @@
+[tcpout]
+defautlGroup = primary_indexers
+maxQueuSize = 100MB
+useACK = true
+forceTimebaseAutoLB = true
+forwardedindex.2.whitelist = (_audit|_introspection|_internal)
+
+[tcpout:primary_indexers]
+server = SVLCTPLOGIDX01.mom.fr:9997, SVLCTPLOGIDX02.mom.fr:9997
+
+#clientCert = $SPLUNK_HOME/etc/auth/server.pem
+#sslPassword = 

Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf

@@ -0,0 +1,2 @@
+[sslConfig]
+sslRootCAPath = $SPLUNK_HOME/etc/auth/ca.pem