in system/local directory below is the configuration.
[monitor:\\{Log Location}]
sourcetype=test
index=chilqa
disabled = false
but it is surprising why data is sent to main index still.
is there any other location which is making the index to pass to main index?
Thanks.
Vikram.
↧