https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112402#M23532 <P>how come when i configured the data in the heavy forwarder, sometimes it will created in launcher folder /etc/apps/launcher/local/inputs.conf, sometime it created in search folder /etc/apps/search/local/inputs.conf. How to resolve those that already created in launcher and move to search folder?thks</P> Sun, 30 Mar 2014 06:10:51 GMT SplunkCSIT 2014-03-30T06:10:51Z https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112402#M23532 <P>how come when i configured the data in the heavy forwarder, sometimes it will created in launcher folder /etc/apps/launcher/local/inputs.conf, sometime it created in search folder /etc/apps/search/local/inputs.conf. How to resolve those that already created in launcher and move to search folder?thks</P> Sun, 30 Mar 2014 06:10:51 GMT https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112402#M23532 SplunkCSIT 2014-03-30T06:10:51Z https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112403#M23533 <P>You'll get inputs in the launcher app if you add it from within the launcher app. Functionally it doesn't matter where the input is defined, but for maintenance it's indeed a good idea to consolidate that in one app. For future inputs, make sure you first enter the search app and then add the input. For existing inputs, move the stanza from /etc/apps/launcher/local/inputs.conf to /etc/apps/search/local/inputs.conf and restart.</P> Sun, 30 Mar 2014 10:20:12 GMT https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112403#M23533 martin_mueller 2014-03-30T10:20:12Z https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112404#M23534 <P>thks, for best practice, we should put the indexes.conf and inputs.conf in launcher folder or search folder?</P> Mon, 31 Mar 2014 06:11:31 GMT https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112404#M23534 SplunkCSIT 2014-03-31T06:11:31Z https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112405#M23535 <P>Given a choice of those two, I'd pick the search app every time.</P> <P>As soon as your deployment grows it'll make sense to group inputs into their own apps, and deploy those apps as a whole onto their forwarders.</P> Mon, 31 Mar 2014 07:19:46 GMT https://community.splunk.com/t5/Getting-Data-In/log-file-created-in-launcher-and-search-folder/m-p/112405#M23535 martin_mueller 2014-03-31T07:19:46Z