Getting Data In

Can single Forwarder send fileA to indexerA and fileB to indexerB?

_z_
Explorer

I have a 'dev/tst' db host.. but have dev app indexer and tst app indexer.
Is there a way to configure a single forwarder on the dev/tst db host to send dev db info to dev app indexer and tst db info to tst app indexer?

Tags (1)
1 Solution

MuS
Legend

Hi z

you can find everything in here read the part

Filter and route event data to target groups

and you should be able to configure it.

regards

View solution in original post

MuS
Legend

Hi z

you can find everything in here read the part

Filter and route event data to target groups

and you should be able to configure it.

regards

_z_
Explorer

perfect! Thanks!

Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...