Getting Data In

Can single Forwarder send fileA to indexerA and fileB to indexerB?

_z_
Explorer

I have a 'dev/tst' db host.. but have dev app indexer and tst app indexer.
Is there a way to configure a single forwarder on the dev/tst db host to send dev db info to dev app indexer and tst db info to tst app indexer?

Tags (1)
1 Solution

MuS
Legend

Hi z

you can find everything in here read the part

Filter and route event data to target groups

and you should be able to configure it.

regards

View solution in original post

MuS
Legend

Hi z

you can find everything in here read the part

Filter and route event data to target groups

and you should be able to configure it.

regards

_z_
Explorer

perfect! Thanks!

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...