<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Set a default index for all INPUTS within a specific app only in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482908#M31658</link>
    <description>&lt;P&gt;Settings in .conf files are not app-specific, they are stanza-specific.  Values in the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza apply to all inputs in all apps unless overwritten by the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza in another app that is processed first.  btool can tell you what settings will apply.&lt;/P&gt;</description>
    <pubDate>Wed, 13 Nov 2019 12:54:56 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2019-11-13T12:54:56Z</dc:date>
    <item>
      <title>Set a default index for all INPUTS within a specific app only</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482907#M31657</link>
      <description>&lt;P&gt;I have an app with a long list of inputs. I want to set them to go to a specific index (let's say &lt;CODE&gt;index = my_index&lt;/CODE&gt;).&lt;BR /&gt;
I can achieve this by placing &lt;CODE&gt;index = my_index&lt;/CODE&gt; under the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza in the app.&lt;/P&gt;

&lt;P&gt;However, will this affect other apps on the forwarder with their inputs set to default?&lt;BR /&gt;
I deploy this app with a Deployment Server to several UFs.&lt;/P&gt;</description>
      <pubDate>Wed, 13 Nov 2019 11:54:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482907#M31657</guid>
      <dc:creator>eden881</dc:creator>
      <dc:date>2019-11-13T11:54:41Z</dc:date>
    </item>
    <item>
      <title>Re: Set a default index for all INPUTS within a specific app only</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482908#M31658</link>
      <description>&lt;P&gt;Settings in .conf files are not app-specific, they are stanza-specific.  Values in the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza apply to all inputs in all apps unless overwritten by the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza in another app that is processed first.  btool can tell you what settings will apply.&lt;/P&gt;</description>
      <pubDate>Wed, 13 Nov 2019 12:54:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482908#M31658</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2019-11-13T12:54:56Z</dc:date>
    </item>
    <item>
      <title>Re: Set a default index for all INPUTS within a specific app only</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482909#M31659</link>
      <description>&lt;P&gt;I think this is incorrect, as I tried it and found out that &lt;CODE&gt;[default]&lt;/CODE&gt; only affects the inputs in the specific app...&lt;/P&gt;</description>
      <pubDate>Wed, 20 Nov 2019 12:53:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482909#M31659</guid>
      <dc:creator>eden881</dc:creator>
      <dc:date>2019-11-20T12:53:49Z</dc:date>
    </item>
    <item>
      <title>Re: Set a default index for all INPUTS within a specific app only</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482910#M31660</link>
      <description>&lt;P&gt;Eventually I tried it out myself, and found out that the &lt;CODE&gt;[default]&lt;/CODE&gt; stanza only affects the inputs in it's specific app.&lt;/P&gt;</description>
      <pubDate>Wed, 20 Nov 2019 12:55:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/482910#M31660</guid>
      <dc:creator>eden881</dc:creator>
      <dc:date>2019-11-20T12:55:06Z</dc:date>
    </item>
    <item>
      <title>Re: Set a default index for all INPUTS within a specific app only</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/743824#M58567</link>
      <description>&lt;P&gt;I tried this on a server and found the opposite to be true. It was setting index across all stanzas at leas the ones set in&amp;nbsp;etc\system\default\inputs.conf for the forwarder.&lt;/P&gt;</description>
      <pubDate>Tue, 08 Apr 2025 19:50:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Set-a-default-index-for-all-INPUTS-within-a-specific-app-only/m-p/743824#M58567</guid>
      <dc:creator>ccWildcard</dc:creator>
      <dc:date>2025-04-08T19:50:38Z</dc:date>
    </item>
  </channel>
</rss>

