In my corporate, enterprise Splunk environment I do not have admin rights. As I am still modeling with many different sources and types of input data (such as transaction, configuration, application, database, system metrics, etc) I would like to create new inputs/files in my defined input sourcetype directories that Splunk can automatically parse and identify field names from the data files themselves. I would like to eliminate having to bother the Splunk administrator every time I have a new type of data metric/format.. any suggestions?
↧
