Inputs, Props and Transforms per App?

[JensT]

Hello,

is it possible in Splunk 4.2.3+ to have separate Inputs, Props and Transforms per App?

Example:
App1: Listen on Port 10000, Extract Field foo1 only for the data from App1
App1: Listen on Port 20000, Extract Field foo2 only for the data from App2

Regards,

Jens

[Ayn]

Yes, these kinds of settings can be defined per app. You might want to have a look at this section of the docs: http://docs.splunk.com/Documentation/Splunk/latest/admin/Wheretofindtheconfigurationfiles

[Ayn]

Ah, I see I misunderstood your question. No, the configurations are indeed merged. It is not possible to separate that per app - you'd have to use different sources, sourcetypes or similar.

[JensT]

Hi,

so you say the configurations are not merged? And settings from App1 are not applied to App2?

Jens