Archive

How to get a log in an index other than main?

New Member

We have an application log that is being stored in the main index instead of an index we have called application_name. How do I get the application log data into the index called application_name?

Tags (1)
0 Karma
1 Solution

Motivator

Hello! You can first create your index. During indexing your logs, you will be prompted to select the index. Just select your index, and everything will be ok.

Thanks

View solution in original post

0 Karma

Motivator

Hello! You can first create your index. During indexing your logs, you will be prompted to select the index. Just select your index, and everything will be ok.

Thanks

View solution in original post

0 Karma

New Member

So I found that the index is created already. The application has 2 logs, one is going into the correct index, and one is going into the main. How can I set the other to go into the correct index?

0 Karma

Motivator

You can set it both via splunk web or the configuration file.

Via splunk web:
First, create the index: Settings -->Indexes -->Newand create your index
Second, index your log: From splunk home, Add data--> Monitor. Select the source, ......... At the Next screen, select the index, ........ ....

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!