<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Can Monitor files and directories and HTTP Event Collector use the same name of source data type in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Can-Monitor-files-and-directories-and-HTTP-Event-Collector-use/m-p/484513#M193446</link>
    <description>&lt;P&gt;My application wants to sent dat to SPLUNK via Monitor files and directories  and meantime via HTTP Event Collector. My application will format the data them required. Can I use the same data source type to sent to data with different format via different method(Monitor files and directories  and meantime via HTTP Event Collector).&lt;/P&gt;</description>
    <pubDate>Sun, 01 Mar 2020 08:12:51 GMT</pubDate>
    <dc:creator>cdp_fap</dc:creator>
    <dc:date>2020-03-01T08:12:51Z</dc:date>
    <item>
      <title>Can Monitor files and directories and HTTP Event Collector use the same name of source data type</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Can-Monitor-files-and-directories-and-HTTP-Event-Collector-use/m-p/484513#M193446</link>
      <description>&lt;P&gt;My application wants to sent dat to SPLUNK via Monitor files and directories  and meantime via HTTP Event Collector. My application will format the data them required. Can I use the same data source type to sent to data with different format via different method(Monitor files and directories  and meantime via HTTP Event Collector).&lt;/P&gt;</description>
      <pubDate>Sun, 01 Mar 2020 08:12:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Can-Monitor-files-and-directories-and-HTTP-Event-Collector-use/m-p/484513#M193446</guid>
      <dc:creator>cdp_fap</dc:creator>
      <dc:date>2020-03-01T08:12:51Z</dc:date>
    </item>
    <item>
      <title>Re: Can Monitor files and directories and HTTP Event Collector use the same name of source data type</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Can-Monitor-files-and-directories-and-HTTP-Event-Collector-use/m-p/484514#M193447</link>
      <description>&lt;P&gt;Yes, thats totally fine if the data formatting is identical from both sources.&lt;BR /&gt;
It would make very little sense (and probably cause you issues down the line) if you have two differing formats of the same sourcetype, but it sounds like you can control the format of the data to ensure its consistent.&lt;/P&gt;</description>
      <pubDate>Sun, 01 Mar 2020 09:05:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Can-Monitor-files-and-directories-and-HTTP-Event-Collector-use/m-p/484514#M193447</guid>
      <dc:creator>nickhills</dc:creator>
      <dc:date>2020-03-01T09:05:39Z</dc:date>
    </item>
  </channel>
</rss>

