Getting Data In

Add data from forwarders requires copy of clustered indexes indexes.conf on DS

splunkreal
Motivator

Hello,

is there any better solution than copying indexes.conf based in /etc/master-apps to the deployment server apps in order to use the "Settings/Add data/Forward (data from a Splunk forwarder)" GUI? The copy is just there to get list of indexes and use the web interface to configure new data to add and deploy to forwarders?

Capture.PNG

Thanks.

* If this helps, please upvote or accept solution 🙂 *
Labels (4)
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...