I do not understand how the indexing in splunk works, if there are multiple types of log files and we want only certain data from each one how can we specify it will we have to set up indexes for each type and assign them by type in our inputs.conf.
1.) Can someone explain what to do in this situation at a high level?
Try here