Where does logs stored

aruncp333 · ‎07-11-2019

Hello Splunkers,

I have an enterprise splunk deployment with 4 indexer clisters and a Search Head cluster.

I have installed Sophos app on Search head. I am getting the logs from sophos central servers by api integration method. I would like to know where these logs are stored? How to identify which indexer its storing on.

kmorris_splunk · ‎07-11-2019

Look at the field splunk_server. This will tell you the hostname of the indexer that the data is stored on.

Where does logs stored

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Where does logs stored

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever