Deployment Architecture

How do I create an index for a group of specific hosts?

dabel
Engager

I have forwarders setup on a bunch of different servers sending to a single manager, how can I separate the inputs into different indexes based on their hostnames? I have a couple indexes created.

Tags (1)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

If you already have the indexes created, you can just specify index=myindex for each input in inputs.conf on each forwarder.

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

If you already have the indexes created, you can just specify index=myindex for each input in inputs.conf on each forwarder.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...