Getting Data In

Add data from forwarders requires copy of clustered indexes indexes.conf on DS

realsplunk
Builder

Hello,

is there any better solution than copying indexes.conf based in /etc/master-apps to the deployment server apps in order to use the "Settings/Add data/Forward (data from a Splunk forwarder)" GUI? The copy is just there to get list of indexes and use the web interface to configure new data to add and deploy to forwarders?

Capture.PNG

Thanks.

Labels (4)
0 Karma