Splunk Search

index a file in a file system which can be mounted on different servers

bob87
Explorer

Hi

I would like to index a file which is in a file system which can be mounted on different servers at different points in time. On each of these servers there is a universal forwarder installed. How can I index this file without it being indexed all over again when the file system is mounted on another server?

Tags (1)
0 Karma

Ayn
Legend

You cannot, unless you can also have the Splunk installation located in the same file system and only have Splunk running when the file system is mounted.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...