Multiple indexer for logs of one cluster

[AlexGerl89]

Hi, I would like to know if there is any possibility to use multiple indexer for logs of one cluster?

As example, I would like to define following in the values.yaml:

splunkPlatform:
endpoint1: https://www.splunk.com:8088/events
token1: xxx-xxx-xxx-xx1
index1: first_index

endpoint2: https://www.splunk.com:8088/events
token2: xxx-xxx-xxx-xx2
index2: second_index

endpointN: https://www.splunk.com:8088/events
tokenN: xxx-xxx-xxx-xxn
indexN: n_index

For the best case scenario, It should be possible to use n-indices with the assosiacted tokens.

The benefit here would be, that we do not have to deploy n-applications and spare k8s ressources. Furthermore, it would be possible to evaluate specifically the logs in greater detail.

Thank you!

[karthik-chinnathambi]

Hi, we have 3 indexers in our environment and how to ensure all are in sysnc