https://community.splunk.com/t5/Getting-Data-In/Multiple-Indexes-single-S3-Bucket-with-SQS/m-p/540128#M90456 <P>Given a Splunk environment with SQS (S3) as the data source, is it possible to "filter" messages at&nbsp; so that we can separate each file (based on its prefix) to different Splunk indexes?</P><P>Put another way, if we have 25 indexes, corresponding to 25 different data types in an S3 bucket, and we want to use S3 and SQS, can we configure Splunk to conditionally index the data based on a path/prefix match pattern applied to each SQS message?</P><P>&nbsp;</P> Tue, 16 Feb 2021 15:59:49 GMT megabit 2021-02-16T15:59:49Z https://community.splunk.com/t5/Getting-Data-In/Multiple-Indexes-single-S3-Bucket-with-SQS/m-p/540128#M90456 <P>Given a Splunk environment with SQS (S3) as the data source, is it possible to "filter" messages at&nbsp; so that we can separate each file (based on its prefix) to different Splunk indexes?</P><P>Put another way, if we have 25 indexes, corresponding to 25 different data types in an S3 bucket, and we want to use S3 and SQS, can we configure Splunk to conditionally index the data based on a path/prefix match pattern applied to each SQS message?</P><P>&nbsp;</P> Tue, 16 Feb 2021 15:59:49 GMT https://community.splunk.com/t5/Getting-Data-In/Multiple-Indexes-single-S3-Bucket-with-SQS/m-p/540128#M90456 megabit 2021-02-16T15:59:49Z