Currently the Cisco Networks app is looking in all Indexes when searching for cisco:ios sourcetype. Looking for an easy way to restrict this to a single index to help improve performance. No config options in the App or Add-on that I can see.
Any thoughts?
Hi @dgiberson look at the macro :
[cisco_ios_index] definition = (index=*)
