Splunk Search

index a file in a file system which can be mounted on different servers

bob87
Explorer

Hi

I would like to index a file which is in a file system which can be mounted on different servers at different points in time. On each of these servers there is a universal forwarder installed. How can I index this file without it being indexed all over again when the file system is mounted on another server?

Tags (1)
0 Karma

Ayn
Legend

You cannot, unless you can also have the Splunk installation located in the same file system and only have Splunk running when the file system is mounted.

0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...