×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
mjesudasan
New Member
Member since: ‎03-06-2015
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎03-06-2015
Activity Feed
View All

Is it possible to modify inputs.conf on our Window...

by in Getting Data In
‎05-01-2015 03:16 AM
‎05-01-2015 03:16 AM
Hi, I am trying to manage the universal forwarders on all our Windows system using the deployment server. They all have the same app (splunk_TA_windows) but the inputs.conf are all different on each server. Is it possible to manage this via serverclass.conf ? For example: server 1 inputs.conf: [WinEventLog://Application] disabled = 0 start_from = oldest current_only = 0 index = main host =develop server 2 inputs.conf: [WinEventLog://Application] disabled = 0 start_from = oldest current_only = 0 index = main host =staging Thanks, Milan ... View more

What is the best way categorize environments for d...

by in Splunk Search
‎04-08-2015 08:45 AM
‎04-08-2015 08:45 AM
Hi, My question is regarding indexing IIS logs. We have about 50 websites on a single server. 4 websites make up 1 environment, I am trying to find the best way to keeps the logs organized so it's easy to search per environment. I tried to divide the websites by sourcetype, but I don't think that's the best approach as it will get confusing when we have 15 environments. Am I able to create a new field, set in the inputs.conf, for example env=master and all the 4 websites that make up the 'master' environment will fall under the search env="master" ? Thanks, Milan ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM