I have a several indexes. index is f5, sos, websphere. only index f5 forwarding another indexer.
answered 04 Apr '12, 14:24
Yes, you can do it. You should set the forwarding to happen on the inputs that forward data to the index you're interested in forwarding. Otherwise, you're going to have to do routing based on source/sourcetype/host in props/transforms.
Route inputs to specific indexers based on the data's input
If you can't use the input method, you can forward a subset of data using the instructions here:
answered 04 Apr '12, 14:48