https://community.splunk.com/t5/Deployment-Architecture/Only-splunkd-logs-for-index-internal-is-visible-for-my-AWS-UF/m-p/380725#M20395 <P>Hi,<BR /> I have around 1k number of hosts setup in AWS containers where I don't have access to any forwarders.</P> <P>All my forwarders points out my splunk on-premise environment. When I'm trying to look for the metrics log for all my forwarders, I coudn't find any of them and able to see only splunkd.log in my splunk.</P> <P>I'm pretty sure only splunkd.log are ingested to splunk. <BR /> But is this possible, can I restrict splunk internal logs like metrics.logs not to forward to indexer server.</P> <P>If yes, where is the configuration needs to be set. Kindly help.</P> <P>Thanks,<BR /> Ramu Chittiprolu</P> Fri, 21 Sep 2018 06:42:52 GMT rchittip 2018-09-21T06:42:52Z https://community.splunk.com/t5/Deployment-Architecture/Only-splunkd-logs-for-index-internal-is-visible-for-my-AWS-UF/m-p/380725#M20395 <P>Hi,<BR /> I have around 1k number of hosts setup in AWS containers where I don't have access to any forwarders.</P> <P>All my forwarders points out my splunk on-premise environment. When I'm trying to look for the metrics log for all my forwarders, I coudn't find any of them and able to see only splunkd.log in my splunk.</P> <P>I'm pretty sure only splunkd.log are ingested to splunk. <BR /> But is this possible, can I restrict splunk internal logs like metrics.logs not to forward to indexer server.</P> <P>If yes, where is the configuration needs to be set. Kindly help.</P> <P>Thanks,<BR /> Ramu Chittiprolu</P> Fri, 21 Sep 2018 06:42:52 GMT https://community.splunk.com/t5/Deployment-Architecture/Only-splunkd-logs-for-index-internal-is-visible-for-my-AWS-UF/m-p/380725#M20395 rchittip 2018-09-21T06:42:52Z