Hi,
To the best of my knowledge, the architecture for multi-site high availability is isolated worker clusters on each site. We have several clusters of forwarders on each site sending forwarding logs to these worker clusters. Global load balancers will check the health of each cluster and only forward to the local site, unless of course that site would fail and then forward to the opposite site.
When using the LI agents this becomes complicated, we will have 5 different clusters of forwarders on each site (two sites). In most scenarios the agent config will be the same across all agents and environments. Is there anyway to sync from a "master" agent config across all forwarders, and indeed, the worker clusters.
Any help or experience would be appreciated.