Getting Data In
Highlighted

How to monitor the same log location from different servers with different source names?

New Member

Hi,

I have the same log file locations with same file names in 3 different VMs. I want to differentiate them with source name in the same index and sourcetype. Here is my inputs.conf stanza:

[monitor:///data02/logs/ConnectionServer/logs/ConnectionServer.log]
sourcetype=jboss_server
source=app_prod_node1
index=prod_app
ignoreOlderThan=1d
0 Karma
Highlighted

Re: How to monitor the same log location from different servers with different source names?

Legend

That is not the best way to do this. Let the source default to the file name. Set the host to the hostname of the VM. Differentiate using the the host name, not the source name.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.