Hello Splunkers
How to write stanza to monitor for 2 services...
if I am using this stanza. it will gives 100+ services data... but I need only 2 or 3 services only...
[WinHostMon://Service]
type = service
interval = 300
disabled = 0
index = myindex
There is no filtering or limiting option for this type of input. You'd have to filter the events further down the pipeline. On your indexer or HF, depending on your setup.
