How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

Are you a member of the Splunk Community?