send data to different indexes splunk connect for syslog?

[nvij_splunk]

I  want to route Syslog events to different indexes based on hostname, best to do this on indexer with transforms?

[nvij_splunk]

Check this:

https://splunk-connect-for-syslog.readthedocs.io/en/1.9.0/configuration/#override-index-or-metadata-...