https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185240#M2470 <P>I'm using the splunk java logging appenders. Are there hooks for setting things like source in my app config rather than relying on splunk forwarder config on the receiving end?</P> Thu, 13 Mar 2014 01:34:18 GMT juniormint 2014-03-13T01:34:18Z https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185240#M2470 <P>I'm using the splunk java logging appenders. Are there hooks for setting things like source in my app config rather than relying on splunk forwarder config on the receiving end?</P> Thu, 13 Mar 2014 01:34:18 GMT https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185240#M2470 juniormint 2014-03-13T01:34:18Z https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185241#M2471 <P>If you use a REST Appender you can set this meta data at the source.</P> <P>Have you looked <A href="https://github.com/damiendallimore/SplunkJavaLogging/tree/master/config">at the example configs</A> ? </P> Thu, 13 Mar 2014 01:41:16 GMT https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185241#M2471 Damien_Dallimor 2014-03-13T01:41:16Z https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185242#M2472 <P>Thanks for your answer Damien.</P> <P>I'm just looking around...are there rest endpoints for sending data to a forwarder? I had been using a tcp appender sending data to a forwarder on the same host as my app.</P> Thu, 13 Mar 2014 02:05:52 GMT https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185242#M2472 juniormint 2014-03-13T02:05:52Z https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185243#M2473 <P>Yes. This is explained in the README ( <A href="https://github.com/damiendallimore/SplunkJavaLogging/blob/master/README.md">https://github.com/damiendallimore/SplunkJavaLogging/blob/master/README.md</A> ) and shown in the example config in the the link I posted in my previous reply.</P> Thu, 13 Mar 2014 02:09:24 GMT https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185243#M2473 Damien_Dallimor 2014-03-13T02:09:24Z https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185244#M2474 <P>I see...thanks again.</P> Thu, 13 Mar 2014 02:21:37 GMT https://community.splunk.com/t5/Splunk-Dev/Is-there-a-way-to-specify-index-source-fields-when-using-splunk/m-p/185244#M2474 juniormint 2014-03-13T02:21:37Z