×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
mellqui
Explorer
Member since: ‎09-03-2021
‎06-10-2022
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎09-03-2021
Activity Feed
View All

inputs.conf and custom apps: Can you have an input...

by in Splunk Enterprise
‎06-09-2022 11:07 AM
‎06-09-2022 11:07 AM
First time splunker here. Can you have an inputs.conf with only: [default] host = <fqdn> In etc/system/local while having custom apps with inputs in etc/apps? Or will the etc/system/local/inputs.conf mess with the custom app inputs? ... View more

Re: Are logs still kept locally?

by in Getting Data In
‎09-03-2021 09:55 AM
‎09-03-2021 09:55 AM
Hey @yannK,   This answers my question -- much appreciated! ... View more

Re: Are logs still kept locally?

by in Getting Data In
‎09-03-2021 08:43 AM
‎09-03-2021 08:43 AM
Hey @gcusello, I'm more less looking to see if the local log files are removed/transferred from the server when they are forwarded. We have other monitoring tools that use these logs. Thanks for your reply. ... View more

Are logs still kept locally?

by in Getting Data In
‎09-03-2021 07:08 AM
‎09-03-2021 07:08 AM
Brand new to using the Universal Forwarder, and Splunk in general.   Question: When using the forwarder/monitor, the logs on the forwarding server are still kept locally, correct? They aren't removed/modified in any way? ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-10-2022 02:07 PM