How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering. Because we’ve ...

As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Are you a member of the Splunk Community?