https://community.splunk.com/t5/Getting-Data-In/Filtering-the-data-to-different-indexes/m-p/437069#M76227 <P>Hello Guys,</P> <P>I have Splunk instance which is receiving data from different instances like DEV, QA, UAT and PROD. For then we have separate index like DEV_app, QA_app, UAT_app and PROD_app and they are sharing same sourcetype i.e. app. </P> <P>Now the issue is, I need to filter events coming in two indexes i.e. Need to seperate debug logs, and as they are sharing same sourcetype so i can't apply filter based on it, as DEV_app filter data need to do to, DEV_debug, QA_app to QA_debug like this.</P> <P>Any one has some solution to it?</P> Tue, 29 Sep 2020 23:01:09 GMT vishaltaneja070 2020-09-29T23:01:09Z https://community.splunk.com/t5/Getting-Data-In/Filtering-the-data-to-different-indexes/m-p/437069#M76227 <P>Hello Guys,</P> <P>I have Splunk instance which is receiving data from different instances like DEV, QA, UAT and PROD. For then we have separate index like DEV_app, QA_app, UAT_app and PROD_app and they are sharing same sourcetype i.e. app. </P> <P>Now the issue is, I need to filter events coming in two indexes i.e. Need to seperate debug logs, and as they are sharing same sourcetype so i can't apply filter based on it, as DEV_app filter data need to do to, DEV_debug, QA_app to QA_debug like this.</P> <P>Any one has some solution to it?</P> Tue, 29 Sep 2020 23:01:09 GMT https://community.splunk.com/t5/Getting-Data-In/Filtering-the-data-to-different-indexes/m-p/437069#M76227 vishaltaneja070 2020-09-29T23:01:09Z