Consider I have to monitor below log file and send to two or multiple indexes at the same time. ( NOTE: Not indexers groups)
[monitor://D:\test\test1.log]
sourcetype = test
index = online and offline
How can we achieve this?
↧