Splunk dynamically manage _metadata SAI

Splunk Enterprise

Hey,

We look for an elegant way to set _meta field in inputs.conf of SAI application [splunk app for infrastructure]

We now have the following line in inputs.conf of the SAI application

_meta = os::'windows server 2016' os_version::10.0.14393 ip:'10.0.0.1'

We are looking for a way to set up this line automatically when running

splunk reload deploy server

Any suggestions?

Get Updates on the Splunk Community!

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Join the Conversation