Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Configuring inputs.conf to send data to specific Index

$
0
0
I have a Splunk setup defined like: Universal Forwarder ---->Heavy Forwarder ------>Indexer I need that all the logs hitting my Indexer should go to specific index. Which option is better: 1) Configuring **index= new_index** in Universal forwarder's input.conf 2) Configuring **index= new_index** in Heavy forwarder's input.conf 3) Configuring **index= new_index** in Indexer's input.conf

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>