Hi We are using Splunk enterprise version 8.3 in our environment.
System logs forwarding to local indexer & another HF to indexer.
As per document reference we modified index as our company name,but still name showing as _index , where to modify index name as our company name..Please guide.