How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Tune in to learn about:Large scale architecture when using Ingest ActionsRegEx performance considerations ...

How to avoid duplicate indexing from HTTP event collector and file