Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I define customize sourcetype that I write logs in _internal?

$
0
0
My custom script writes log in /opt/splunk/var/log/splunk/script.log. I want the log to be indexed in _internal but have to define a customized sourcetype for the log to write in a proper linebreak. Please let me know how to define sourcetype for the _internal data.

Viewing all articles
Browse latest Browse all 47296

Trending Articles