Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

We are on Splunk 7.3.1 , would need to know if there is any to de-duplicate the incoming data on FOrwarder or Indexer level?

$
0
0
We have many instances where duplicate data has been coming due to server instances running in wrong manner. Because of that duplicate has found to be indexed. Is there is config change we can do on Forwarder or Indexer to stop indexing supplicate entries.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>