×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
chrisbutcher
New Member
Member since: ‎11-27-2012
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-27-2012
View All

Re: Send Windows Event Log Info To 2 Different Ind...

by in Getting Data In
‎07-02-2014 03:19 AM
‎07-02-2014 03:19 AM
That works great thanks. Was in the right area with a second group, but didnt specifiy it in the default group stanza. This has however thrown up a further question. The 2 indexes on the indexers have different names. In one of the deployed apps we specify an index name for the data and this overwrites the default index name used. So we now have eventlogs going to 2 different indexers but it is looking for the same index on each Server. Can I configure it so as to send to Index_A on Server_A and Index_B on Server_B? ... View more

Send Windows Event Log Info To 2 Different Indexer...

by in Getting Data In
‎07-02-2014 12:45 AM
‎07-02-2014 12:45 AM
We have a strange set up in my company whereby we have separate application support team and infrastructure teams that have different requirements. For security and compliance reasons we cannot have both teams accessing the data on both Indexers. What we would like to know is if it is possible to index a windows event log to 2 different indexers. The same information needs to sent to both indexers. So as an example, on Server_A we would like to send all event log data to Indexer_A and all data to Indexer_B, ensuring the same data is sent to both Indexers. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM