https://community.splunk.com/t5/Getting-Data-In/adding-custom-source-override-to-wineventlog/m-p/172113#M34694 <P>Doesn't look like it according to <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf">inputs.conf</A>, but you could always use an index-time transform.</P> Thu, 16 Jan 2014 17:16:37 GMT sowings 2014-01-16T17:16:37Z https://community.splunk.com/t5/Getting-Data-In/adding-custom-source-override-to-wineventlog/m-p/172112#M34693 <P>Hello,</P> <P>Is it possible to add a custom source override to a windows eventlog in the inputs.conf stanza?</P> Mon, 09 Dec 2013 14:35:34 GMT https://community.splunk.com/t5/Getting-Data-In/adding-custom-source-override-to-wineventlog/m-p/172112#M34693 aaronkorn 2013-12-09T14:35:34Z https://community.splunk.com/t5/Getting-Data-In/adding-custom-source-override-to-wineventlog/m-p/172113#M34694 <P>Doesn't look like it according to <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf">inputs.conf</A>, but you could always use an index-time transform.</P> Thu, 16 Jan 2014 17:16:37 GMT https://community.splunk.com/t5/Getting-Data-In/adding-custom-source-override-to-wineventlog/m-p/172113#M34694 sowings 2014-01-16T17:16:37Z