Can I have multiple searches collecting (using the collect command) to the same index?

[mIliofotou_splu]

Can I have multiple searches collecting (using the collect command) to the same index?

The number of searches can be from one to around 16.

[ashrafk · Accepted solution]

Yes , You can have multiple search heads connecting to the same Index. You can use the DMC console to do the same.

[mIliofotou_splu]

The answer is yes. Even in a non distributed environment you can have multiple jobs collecting (writing) to the same index. Each collect will first be writing to a different file (i.e., source). The indexer will be indexing each one of those files in separately.

[gcusello]

Yes, you can discriminate them using sourcetype.
Usually we should use different indexes for retention, access or performance reasons.
Bye.
Giuseppe

[gcusello]

if you're satisfied of the answer, please, accept the answer.
Bye.
Giuseppe