We built a custom app and deployed it in splunk. It is writing logs in splunk/var/log/appname/appname.log. I would like to find a way handle the logs natively within splunk, possibly using log.cfg to roll the log at a certain size as well as retention. I added a stanza to log.cfg in an attempt to manage this log but splunk doesnt appear to care about the added configs. Anyone use this file in such a way? Is it even possible? Below is a snippet of the config I added to log.cfg for the app.