As part of the upgrade we are planning to deploy Splunk 6.3 on a new set of physical servers.
We have around 217 forwarders sending data in the existing infrastructure.
Can we have the forwarders configured to send data to the existing infrastructure as well as the new 6.3 enterprise cluster?
The thought behind this is to have existing infrastructure intact while we upgrade the new infrastructure.
↧