Hello,
i can activate compression on the universal forwarder to the indexer. as i understand from the documentation and some answers entries the compression is different between ssl encryption and not.
compressed = [true|false] Applies to non-SSL forwarding only. For SSL useClientSSLCompression setting is used. If true, forwarder sends compressed data. If set to true, the receiver port must also have compression turned on (in its inputs.conf file). Defaults to false.
my question: what is the expected bandwith saving of a compressed stream if i activate it? (useClientSSLCompression and non encrypted?
is it 1:10?
br matthias