Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Is there a better way to edit my current inputs.conf for sourcetypes defined by path?

$
0
0
All, I have a dozen+ inputs I am creating. I feel there there should be a smarter way of doing this. As you can see, I am naming the sourcetype after the log. [monitor:///opt/paidsearch/autopilot/logs/collateral.log] index=paidsearch sourcetype=paidsearch:collateral [monitor:///opt/paidsearch/autopilot/logs/partner.log] index=paidsearch sourcetype=paidsearch:partner

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>