In the inputs.conf, I have the [default] stanza with the index and host like below.
[default]
index = prod_dc
host = C100
Will other stanzas following the [default] stanza inherit index and host from [default]?
For example, will the following work?
[default]
index = prod_dc
host = C100
[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
disabled = 0
That is correct. If you specify index in [default]
stanza, all inputs where you've not specified the index attribute explicitly, will use index defined in default stanza.
That is correct. If you specify index in [default]
stanza, all inputs where you've not specified the index attribute explicitly, will use index defined in default stanza.
Sweet. Thanks!