topic Two diffent indexes in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276337#M52987 <P>Is it possible to send different logs on two different indexes</P> <P>[default]<BR /> host = EDGE1</P> <P>[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]<BR /> disabled = 0</P> <P>[WinEventLog://Microsoft-Windows-WinNat/Oper]<BR /> disabled = 0<BR /> index = DAlogs<BR /> whitelist = 1017,4303,2000,4304,1018</P> <P>[monitor:///C:\Program Files\log_nlb]<BR /> disabled = 0<BR /> sourcetype = csv<BR /> index = nlb_log</P> Tue, 29 Sep 2020 09:19:12 GMT arkonner 2020-09-29T09:19:12Z Two diffent indexes https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276337#M52987 <P>Is it possible to send different logs on two different indexes</P> <P>[default]<BR /> host = EDGE1</P> <P>[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]<BR /> disabled = 0</P> <P>[WinEventLog://Microsoft-Windows-WinNat/Oper]<BR /> disabled = 0<BR /> index = DAlogs<BR /> whitelist = 1017,4303,2000,4304,1018</P> <P>[monitor:///C:\Program Files\log_nlb]<BR /> disabled = 0<BR /> sourcetype = csv<BR /> index = nlb_log</P> Tue, 29 Sep 2020 09:19:12 GMT https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276337#M52987 arkonner 2020-09-29T09:19:12Z Re: Two diffent indexes https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276338#M52988 <P>Sure, in the monitor, you specify the exact log path and its corresponding index.</P> Wed, 06 Apr 2016 14:26:03 GMT https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276338#M52988 ddrillic 2016-04-06T14:26:03Z Re: Two diffent indexes https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276339#M52989 <P>Yes, the index name is available for each data input stanza and each input stanza can be configured to a different indexes (index should exist on the indexer)</P> Wed, 06 Apr 2016 14:27:50 GMT https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276339#M52989 somesoni2 2016-04-06T14:27:50Z Re: Two diffent indexes https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276340#M52990 <P>The sintax in the inputs.conf reported above is it correct? Can you please add an example </P> Thu, 07 Apr 2016 07:21:44 GMT https://community.splunk.com/t5/Getting-Data-In/Two-diffent-indexes/m-p/276340#M52990 arkonner 2016-04-07T07:21:44Z