https://community.splunk.com/t5/Getting-Data-In/Splunk-forwarder-how-can-I-forward-data-to-some-port-with-some/m-p/130533#M26841 <P>Splunk forwarder, how can I forward data to same port at different server with same index name and different sourcetypes for different files?</P> <P>Moreover all above is possible in light forwarder?<BR /> Could you give an example for changes on .conf files?<BR /> **Like<BR /> myindex appAsourcetype<BR /> myindex appBsourcetype<BR /> secondindex appCsourcetype (this is not a must, just extra knowledge if someone knows)</P> Mon, 14 Apr 2014 13:26:36 GMT axl88 2014-04-14T13:26:36Z https://community.splunk.com/t5/Getting-Data-In/Splunk-forwarder-how-can-I-forward-data-to-some-port-with-some/m-p/130533#M26841 <P>Splunk forwarder, how can I forward data to same port at different server with same index name and different sourcetypes for different files?</P> <P>Moreover all above is possible in light forwarder?<BR /> Could you give an example for changes on .conf files?<BR /> **Like<BR /> myindex appAsourcetype<BR /> myindex appBsourcetype<BR /> secondindex appCsourcetype (this is not a must, just extra knowledge if someone knows)</P> Mon, 14 Apr 2014 13:26:36 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-forwarder-how-can-I-forward-data-to-some-port-with-some/m-p/130533#M26841 axl88 2014-04-14T13:26:36Z https://community.splunk.com/t5/Getting-Data-In/Splunk-forwarder-how-can-I-forward-data-to-some-port-with-some/m-p/130534#M26842 <P>The Universal Forwarder can have index and sourcetype defined for its sources. The definition works in inputs.conf just like on a standalone Splunk instance. You'll find documentation here: <A href="http://docs.splunk.com/Documentation/Splunk/6.0.3/Data/Editinputs.conf">http://docs.splunk.com/Documentation/Splunk/6.0.3/Data/Editinputs.conf</A></P> Mon, 14 Apr 2014 14:05:32 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-forwarder-how-can-I-forward-data-to-some-port-with-some/m-p/130534#M26842 martin_mueller 2014-04-14T14:05:32Z