We are moving into a container environment and plan to manage the logs via Splunk Cloud. We'd like to be able to programmatically create the Event Collector, the main index and additional indexes. Has anyone done anything like that? We would need to both create and upgrade.
