Load balancers allocate external network traffic bound for a particular server or application across multiple redundant instances. There are two categories of load balancer: local, in which all resources in a load-balanced pool are on the same subnet; and global or distributed, where the resource pool is spread across multiple sites. In the Common Information Model, load balancer data is typically mapped to the Inventory data model.
Load balancer logs provide operations teams with a record of overall traffic to systems or particular applications and provide indicators of each system’s traffic-handling capacity and health, along with the status and health of the load balancer itself.
When your Splunk deployment is ingesting load balancer data, you can use it to accomplish IT Ops use cases.