Can I use more than one DEST_KEY? For example
I currently have some VPN logs coming in through syslog that I would like to route to an index, and rename the sourcetype.
This really should be two separate transforms.
Take a look at this thread:
View solution in original post