Can we use conditional statements in transforms.conf in case we are having different formats for the logs?? Or if we are having different log formats, is there a way to implement this in my app?
Thankssss !!
Not completely clear on what you want to do. You could configure rule based sourcetyping to manage various formats.
http://docs.splunk.com/Documentation/Splunk/4.3.2/Data/Configurerule-basedsourcetyperecognition
