Hello,
I am planning to setup some custom metrics indexes using this guide: https://docs.splunk.com/Documentation/ITSI/4.10.2/Entity/CustomIndexes
First question: There are two linux metrics macros. I am planning to modify both to be safe but I assume I only need to modify the ta one since that is what I am using to collect data. What is the other one for?
1. itsi_entity_type_nix_metrics_indexes
2. itsi_entity_type_ta_nix_metrics_indexes
Second question: I did a ctrl+f on itsi_im_metrics and noticed that the itsi_im_metrics_indexes macro uses a similar definition to the itsi_entity_type macros that I listed above. I cannot find any information about this macro. Do I need to modify it? What is it used for?
Thank you!
