Splunk dynamically manage _metadata SAI

Splunk Enterprise

Hey,

We look for an elegant way to set _meta field in inputs.conf of SAI application [splunk app for infrastructure]

We now have the following line in inputs.conf of the SAI application

_meta = os::'windows server 2016' os_version::10.0.14393 ip:'10.0.0.1'

We are looking for a way to set up this line automatically when running

splunk reload deploy server

Any suggestions?

Get Updates on the Splunk Community!

In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...