Activity Feed
- Posted Re: Can Heavy Forwarder monitor a Folder and forwards to Splunk indexer ? on Getting Data In. 02-05-2024 05:51 AM
- Posted Collecting Windows Events as Both XML and Standard on Reporting. 05-18-2021 07:28 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
02-05-2024
06:29 AM
Hi @premrajvs , you can input these files on an HF in the same way of on UF and also by GUI (it's easiest). Then youcan forward them to the indexers. Why do you want to install an UF on the same server? Ciao. Giuseppe
... View more
05-18-2021
10:16 AM
The short answer is no, you can't do both. Each stanza in a config file is not a separate task. Instead, Splunk merges the settings for stanzas of the same name. That's why you get only one copy. If you need data that's only available from the XML format then you'll have to bite the bullet and re-write the existing code to support XML.
... View more