Hi
I would like to index a file which is in a file system which can be mounted on different servers at different points in time. On each of these servers there is a universal forwarder installed. How can I index this file without it being indexed all over again when the file system is mounted on another server?
You cannot, unless you can also have the Splunk installation located in the same file system and only have Splunk running when the file system is mounted.