Getting Data In

How to avoid duplicate indexing from HTTP event collector and file

uniqueusername1
New Member

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...