We are trying to replace our current indexer with two new indexers. We made updates in outputs.conf to reflect the new servers. We ran a deployment to initiate the change and after the deployment all of our windows forwarders were fine and showed up, but we are no longer receiving data from any of our unix forwarders and we are not sure why? - We re-deployed our original configuration for the time being until we can work out our issue.
↧