Splunk Search

make the WAS app index independent

yannK
Splunk Employee
Splunk Employee

I do not want to use the index "websphere" for my data.
Instead of hardcoding index=websphere everywhere,
please use a macro that way we will be able to customize the index list.

example of macro : WAS_index
index=webshpere OR index=myindex OR index=myotherindex

0 Karma

vserebryany
New Member

I am not sure if this is a suggestion or already a solution. If the later I would very much like to see the more detailed explanation. I need to configure univ forwarders across number of cells and i need a flexible scriptable way of directing the inputs app to which index to send the data. Will macro work on UF 5.x. Thanks!

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...