Splunk Enterprise

How to collect different types of log data from different applications, residing in a single server?

raj_mpl
Path Finder

How to collect the different types of logs form different types of applications? All the applications were residing in a single server
with a single universal forwarder or do we need to configure anything.

Tags (1)
0 Karma
1 Solution

FrankVl
Ultra Champion

Without more specific info on how those applications write/send their logs, it is a bit hard to give any specific answer.

But basically I would say you can for instance create a separate inputs.conf stanza for each application, pointing it to the relevant log directory and setting individual index and sourcetype settings as desired.

View solution in original post

0 Karma

FrankVl
Ultra Champion

Without more specific info on how those applications write/send their logs, it is a bit hard to give any specific answer.

But basically I would say you can for instance create a separate inputs.conf stanza for each application, pointing it to the relevant log directory and setting individual index and sourcetype settings as desired.

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...