https://community.splunk.com/t5/Getting-Data-In/Do-forwarders-require-indexes-conf/m-p/71306#M14495 <P>If i am setting up a heavy forwarder to monitor directories and tag indexes, do i need to create an indexes.conf on it or is specifying an index in inputs.conf sufficient?</P> Wed, 07 Sep 2011 18:30:07 GMT jaoui 2011-09-07T18:30:07Z https://community.splunk.com/t5/Getting-Data-In/Do-forwarders-require-indexes-conf/m-p/71306#M14495 <P>If i am setting up a heavy forwarder to monitor directories and tag indexes, do i need to create an indexes.conf on it or is specifying an index in inputs.conf sufficient?</P> Wed, 07 Sep 2011 18:30:07 GMT https://community.splunk.com/t5/Getting-Data-In/Do-forwarders-require-indexes-conf/m-p/71306#M14495 jaoui 2011-09-07T18:30:07Z https://community.splunk.com/t5/Getting-Data-In/Do-forwarders-require-indexes-conf/m-p/71307#M14496 <P>It shouldn't be necessary.<BR /> you can have an heavy forwarder specifying index destinations based on props/transforms or in the inputs, but those indexes only exists on the indexers.</P> <P>However, if you are using the CLI to specify a new input with a specific index, you may see an error about index missing. This is a bug and will be fixed, this is why it's better to use the configurations files. </P> Fri, 09 Sep 2011 17:17:05 GMT https://community.splunk.com/t5/Getting-Data-In/Do-forwarders-require-indexes-conf/m-p/71307#M14496 yannK 2011-09-09T17:17:05Z