All Apps and Add-ons

How to remove sourcetype monitoring from TrackMe?

Observer

Hi,

I've installed the TrackMe app in my Splunk Cloud environment.  It's automatically discovered my environment, including indexes and sourcetypes.   I want to monitor most sources by index, not sourcetype.  I've configured the index to be monitored, but all the additional sourcetypes for that index still remain.  Do I need to click on each of these and delete them?  Is there another way to do this?  It's a fair amount of sourcetypes.  

Labels (1)
Tags (1)
0 Karma

Observer

Received answer on Slack.  Use elastic sources. 

0 Karma