Getting Data In

Is it possible to set a custom index for my batch stanza?

the_wolverine
Champion

The inputs.conf.spec file do not indicate that index is a possible attribute for batch. Will it respect my custom index attribute setting or will it use whatever is set as the default for that forwarder?

0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You can specify an index. The parameter is described in the general section of inputs.conf, where it is indicated that it applies to all input types excluding fschange monitor.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You can specify an index. The parameter is described in the general section of inputs.conf, where it is indicated that it applies to all input types excluding fschange monitor.

Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...