Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Group configuration files to simplify each app in splunk (search head, indexer, forwarder)

$
0
0
Is there any guideline or best practice what .conf to put in gui/indexer/forwarder level? I mean each conf has its purpose and alot of settings, but maybe in practice we can somehow isolate its complexity by grouping the .conf for each level? Or at least minimize complexity Like for example, forwarder usually boils down to at minimum app.conf, inputs.conf, outputs.conf

Viewing all articles
Browse latest Browse all 47296

Trending Articles