Hi,
What is the best way to specify the custom index in which I want to ingest data in SPLUNK.
1) Should I use lambda to specify the custom index and return the result to Kinesis and Kinesis will ingest the data
2) Should I use lambda directly to ingest data
3) Can kinesis specify custom index based on cloud watch group so that I can eliminate use of lambda
Following