Is it possible to store additional data with an index? For example, if I wanted to add a custom tag an index to identify it as coming from a particular test environment?
This should help.
http://answers.splunk.com/answers/123629/add-an-alternative-name-as-an-extra-index-identifier
I guess you have to do it for all indexes individually
The example seem to want me to add the field to a specific index. Do you know if I can configure tags.conf to add this to all indexes?
