Splunk load balancing — does adding an intermediate tier actually help?

This article compares the data balance between indexers when using an intermediate forwarding tier, in comparison with forwarders sending direct to indexers without the intermediate tier. Data balance is compared between the two environments using a few indexes and criteria is provided for when an intermediate tier may be of benefit.

The full post is available on medium as Splunk load balancing — does adding an intermediate tier actually help?. A Splunk lantern post is pending.