How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...

For the past four years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...

Splunk streamlines the process of extracting insights from large volumes of data. In this fast-paced world, ...

How to avoid duplicate indexing from HTTP event collector and file