topic Re: Inputs, Props and Transforms per App? in Getting Data In

Inputs, Props and Transforms per App?

JensT — Tue, 04 Oct 2011 13:41:37 GMT

Hello,

is it possible in Splunk 4.2.3+ to have separate Inputs, Props and Transforms per App?

Example:
App1: Listen on Port 10000, Extract Field foo1 only for the data from App1
App1: Listen on Port 20000, Extract Field foo2 only for the data from App2

Regards,

Jens

Re: Inputs, Props and Transforms per App?

Ayn — Tue, 04 Oct 2011 13:57:39 GMT

Yes, these kinds of settings can be defined per app. You might want to have a look at this section of the docs: http://docs.splunk.com/Documentation/Splunk/latest/admin/Wheretofindtheconfigurationfiles

Re: Inputs, Props and Transforms per App?

JensT — Thu, 06 Oct 2011 19:23:29 GMT

Hi,

so you say the configurations are not merged? And settings from App1 are not applied to App2?

Jens

Re: Inputs, Props and Transforms per App?

Ayn — Fri, 07 Oct 2011 07:16:02 GMT

Ah, I see I misunderstood your question. No, the configurations are indeed merged. It is not possible to separate that per app - you'd have to use different sources, sourcetypes or similar.