https://community.splunk.com/t5/Getting-Data-In/definition-serverclass-conf/m-p/42489#M7916 <P>Hi Experts, </P> <P>I would like to a question for serverclass.conf. <BR /> I want to be separated by hostname or IP in serverclass.conf. <BR /> contents of under is ok ?</P> <H2>Tomcat Catalina log definition</H2> <PRE><CODE>[serverClass:tomcat] whitelist.0=192.0.0.(45|46|47|48|49|50|51|52|53|54|55|56|61|62|63|64|65|66|67|68|69|70|71|72) [serverClass:tomcat:app:input-tomcat] restartSplunkd = true </CODE></PRE> <H2>Access_Combined log definition</H2> <PRE><CODE>[serverClass:accesslog] whitelist.0=L7(1|2) [serverClass:accesslog:app:input-accesslog] restartSplunkd = true </CODE></PRE> Thu, 22 Nov 2012 05:31:22 GMT himang2c 2012-11-22T05:31:22Z https://community.splunk.com/t5/Getting-Data-In/definition-serverclass-conf/m-p/42489#M7916 <P>Hi Experts, </P> <P>I would like to a question for serverclass.conf. <BR /> I want to be separated by hostname or IP in serverclass.conf. <BR /> contents of under is ok ?</P> <H2>Tomcat Catalina log definition</H2> <PRE><CODE>[serverClass:tomcat] whitelist.0=192.0.0.(45|46|47|48|49|50|51|52|53|54|55|56|61|62|63|64|65|66|67|68|69|70|71|72) [serverClass:tomcat:app:input-tomcat] restartSplunkd = true </CODE></PRE> <H2>Access_Combined log definition</H2> <PRE><CODE>[serverClass:accesslog] whitelist.0=L7(1|2) [serverClass:accesslog:app:input-accesslog] restartSplunkd = true </CODE></PRE> Thu, 22 Nov 2012 05:31:22 GMT https://community.splunk.com/t5/Getting-Data-In/definition-serverclass-conf/m-p/42489#M7916 himang2c 2012-11-22T05:31:22Z https://community.splunk.com/t5/Getting-Data-In/definition-serverclass-conf/m-p/42490#M7917 <P>Yes, looks OK.</P> Thu, 22 Nov 2012 09:42:09 GMT https://community.splunk.com/t5/Getting-Data-In/definition-serverclass-conf/m-p/42490#M7917 Ayn 2012-11-22T09:42:09Z