How to configure DB logs in heavy forwarder to forward events to indexers?

[bosseres]

Hello, everyone!

I need help.

I configured DB connect app on heavy forwarder and connected database input.

I can view DB logs on Heavy forwarder, but I want to forward this data to indexers.

How can I configure it?

[SinghK]

There is option while configuring the dbconnect app to mention the index to where the data will be indexed. 

You can do that via inputs.conf too on the dbconnect app just add 

index=your index 

Under inputs 

[gcusello]

Hi @bosseres,

you have to do two steps:

• configure your Heavy Forwarder to forward logs to your Indexers, probably you already did this step because you are speaking of an Heavy Forwarder;
• configure, in DB Connect your data inputs adding the information about index, sourcetype, source.

Ciao.

Giuseppe

[bosseres]

found the mistake in outputs, thank you