Deployment Architecture

How do I create an index for a group of specific hosts?

dabel
Engager

I have forwarders setup on a bunch of different servers sending to a single manager, how can I separate the inputs into different indexes based on their hostnames? I have a couple indexes created.

Tags (1)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

If you already have the indexes created, you can just specify index=myindex for each input in inputs.conf on each forwarder.

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

If you already have the indexes created, you can just specify index=myindex for each input in inputs.conf on each forwarder.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...