Splunk Search

Can Monitor files and directories and HTTP Event Collector use the same name of source data type

cdp_fap
Observer

My application wants to sent dat to SPLUNK via Monitor files and directories and meantime via HTTP Event Collector. My application will format the data them required. Can I use the same data source type to sent to data with different format via different method(Monitor files and directories and meantime via HTTP Event Collector).

Tags (1)
0 Karma

nickhills
Ultra Champion

Yes, thats totally fine if the data formatting is identical from both sources.
It would make very little sense (and probably cause you issues down the line) if you have two differing formats of the same sourcetype, but it sounds like you can control the format of the data to ensure its consistent.

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...