How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

Now On Demand Take Your Network Visibility to the Next Level In today’s complex IT environments, ...

In the dynamic world of cybersecurity, staying ahead means constantly solving new puzzles and optimizing your ...

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Are you a member of the Splunk Community?