https://community.splunk.com/t5/Splunk-Data-Stream-Processor/How-to-redirect-Netapp-syslogs-data-to-different-index-using/m-p/606815#M43 <P><SPAN>&nbsp;we are getting netapp data it is in the main index as its only support default syslog ports. how i can create create props.conf to filter it like&nbsp;&lt;host::*netapp*&gt; and want it in its own index&nbsp;&nbsp;</SPAN></P><P><SPAN>how is the props.conf and transform.conf on this requirement</SPAN></P> Mon, 25 Jul 2022 10:20:30 GMT sekhar463 2022-07-25T10:20:30Z https://community.splunk.com/t5/Splunk-Data-Stream-Processor/How-to-redirect-Netapp-syslogs-data-to-different-index-using/m-p/606815#M43 <P><SPAN>&nbsp;we are getting netapp data it is in the main index as its only support default syslog ports. how i can create create props.conf to filter it like&nbsp;&lt;host::*netapp*&gt; and want it in its own index&nbsp;&nbsp;</SPAN></P><P><SPAN>how is the props.conf and transform.conf on this requirement</SPAN></P> Mon, 25 Jul 2022 10:20:30 GMT https://community.splunk.com/t5/Splunk-Data-Stream-Processor/How-to-redirect-Netapp-syslogs-data-to-different-index-using/m-p/606815#M43 sekhar463 2022-07-25T10:20:30Z