<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic S3 bucket log ingestion in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/S3-bucket-log-ingestion/m-p/531436#M89400</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;We have integrated a S3 bucket with Splunk.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Log path -&lt;/P&gt;&lt;P&gt;aaa\folder\out.log&lt;/P&gt;&lt;P&gt;aaa\folder\error.log&lt;/P&gt;&lt;P&gt;aaa\folder\audit.log&lt;/P&gt;&lt;P&gt;aaa\folder\security.log&lt;/P&gt;&lt;P&gt;Out of all these, I want to ingest only out.log and error.log --&amp;gt; How to design a key name for this?&lt;/P&gt;</description>
    <pubDate>Tue, 01 Dec 2020 05:46:06 GMT</pubDate>
    <dc:creator>VijaySrrie</dc:creator>
    <dc:date>2020-12-01T05:46:06Z</dc:date>
    <item>
      <title>S3 bucket log ingestion</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/S3-bucket-log-ingestion/m-p/531436#M89400</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;We have integrated a S3 bucket with Splunk.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Log path -&lt;/P&gt;&lt;P&gt;aaa\folder\out.log&lt;/P&gt;&lt;P&gt;aaa\folder\error.log&lt;/P&gt;&lt;P&gt;aaa\folder\audit.log&lt;/P&gt;&lt;P&gt;aaa\folder\security.log&lt;/P&gt;&lt;P&gt;Out of all these, I want to ingest only out.log and error.log --&amp;gt; How to design a key name for this?&lt;/P&gt;</description>
      <pubDate>Tue, 01 Dec 2020 05:46:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/S3-bucket-log-ingestion/m-p/531436#M89400</guid>
      <dc:creator>VijaySrrie</dc:creator>
      <dc:date>2020-12-01T05:46:06Z</dc:date>
    </item>
  </channel>
</rss>

