<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Grouping hosts for serverclass.conf in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496840#M84729</link>
    <description>&lt;P&gt;Yes, you can use regular expressions in whitelist and blacklist settings.&lt;BR /&gt;
Why are you worried about saving space?  serverclass.conf typically is not that large.&lt;/P&gt;</description>
    <pubDate>Wed, 13 May 2020 17:52:07 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2020-05-13T17:52:07Z</dc:date>
    <item>
      <title>Grouping hosts for serverclass.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496838#M84727</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;

&lt;P&gt;I have a general question on saving some space and grouping hosts in serverclass.conf. I have reviewed &lt;A href="https://answers.splunk.com/answers/41276/groups-of-hosts-for-serverclass-conf.html"&gt;This from 2012&lt;/A&gt;, but doesn't exactly cover what I'm looking for and I am aware of the answer supplied. I'm wondering if the same applies to the below for grouping hosts.&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Example:&lt;/STRONG&gt;&lt;BR /&gt;
  whitelist.0 = host10&lt;BR /&gt;
  whitelist.1 = host11&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Question:&lt;/STRONG&gt;&lt;BR /&gt;
  whitelist.0 = host1[0-1] &lt;/P&gt;

&lt;P&gt;Thanks in advance,&lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2020 15:55:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496838#M84727</guid>
      <dc:creator>putnamblake</dc:creator>
      <dc:date>2020-05-13T15:55:29Z</dc:date>
    </item>
    <item>
      <title>Re: Grouping hosts for serverclass.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496839#M84728</link>
      <description>&lt;P&gt;I have implemented this 30m ago and it does work as intended. If there is a range of hosts (EG: host01-host20) and you only need inputs from host10 and host 11, then the below works. &lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;whitelist.0 = host1[0-1]&lt;/STRONG&gt; &lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2020 17:27:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496839#M84728</guid>
      <dc:creator>putnamblake</dc:creator>
      <dc:date>2020-05-13T17:27:04Z</dc:date>
    </item>
    <item>
      <title>Re: Grouping hosts for serverclass.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496840#M84729</link>
      <description>&lt;P&gt;Yes, you can use regular expressions in whitelist and blacklist settings.&lt;BR /&gt;
Why are you worried about saving space?  serverclass.conf typically is not that large.&lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2020 17:52:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496840#M84729</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-05-13T17:52:07Z</dc:date>
    </item>
    <item>
      <title>Re: Grouping hosts for serverclass.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496841#M84730</link>
      <description>&lt;P&gt;There is about 400+ entries under this particular stanza, any which way I can save some space for easy reading or visibility is a win. &lt;/P&gt;

&lt;P&gt;To be clear, I was aware I could do host01.....05 as host0[1-5] &lt;BR /&gt;
However, was not certain of host10...15  as host1[0-5] &lt;/P&gt;

&lt;P&gt;Was able to test and confirm- Thanks for the help!&lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2020 17:57:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496841#M84730</guid>
      <dc:creator>putnamblake</dc:creator>
      <dc:date>2020-05-13T17:57:02Z</dc:date>
    </item>
    <item>
      <title>Re: Grouping hosts for serverclass.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496842#M84731</link>
      <description>&lt;P&gt;If your problem is resolved, please accept an answer to help future readers.&lt;/P&gt;</description>
      <pubDate>Wed, 13 May 2020 18:41:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Grouping-hosts-for-serverclass-conf/m-p/496842#M84731</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-05-13T18:41:07Z</dc:date>
    </item>
  </channel>
</rss>

