Refine your search:

Hi, When load balancing among multiple indexers, would it work if F5 BIG IP is placed in front of the indexers to receive data from Universal Forwarders? Thanks.

asked 11 Oct '11, 03:52

alextsui's gravatar image

alextsui
2194321
accept rate: 0%


2 Answers:

If you are planning to use F5 BIG IP LTM to do for example Syslog load-balancing, then this is generally OK.

But if you are planning to do load balancing between Indexers and UF using a external load balancer, then this is not recommended and it is best left to the UF and Indexers to perform the load balancing by themselves. There are things like buffering or functions like UseAck which may break when a hardware load balancer is in the equation. So rather than complicating the setup, we would prefer the UF and Indexers to handle this by themselves.

link

answered 11 Oct '11, 05:00

twkan's gravatar image

twkan
63036
accept rate: 33%

Is this still the preferred configuration not to use Big-IPs? Are there future plans to provide the ability to use them between the indexers and UF?

link

answered 31 Jul '12, 17:09

jonathon's gravatar image

jonathon
311
accept rate: 0%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×29
×13

Asked: 11 Oct '11, 03:52

Seen: 1,559 times

Last updated: 31 Jul '12, 17:09

Copyright © 2005-2012 Splunk Inc. All rights reserved.