Hi,
I have around 1k number of hosts setup in AWS containers where I don't have access to any forwarders.
All my forwarders points out my splunk on-premise environment. When I'm trying to look for the metrics log for all my forwarders, I coudn't find any of them and able to see only splunkd.log in my splunk.
I'm pretty sure only splunkd.log are ingested to splunk.
But is this possible, can I restrict splunk internal logs like metrics.logs not to forward to indexer server.
If yes, where is the configuration needs to be set. Kindly help.
Thanks,
Ramu Chittiprolu
