How do I modify marcos.conf to include multiple indexes ? Will it recognize wildcards in the index name?
example:
[event_sources]
definition = (index="win*" OR source=*WinEventLog*)
disabled = 0
↧