Hi,
We have integrated a S3 bucket with Splunk.
Log path -
aaa\folder\out.log
aaa\folder\error.log
aaa\folder\audit.log
aaa\folder\security.log
Out of all these, I want to ingest only out.log and error.log --> How to design a key name for this?