Hi, I need to filter data to reduce my ingestion volume and for that I need to change below two files. But I don't see these file in any option in splunk cloud platform. I am attaching the settings menu in splunk cloud. I have sc_admin privileges but still I don't see these files anywhere. Can you please let me know where to find these files and how to edit them in splunk clould ? File props.conf [httpevent] TRANSFORMS-t1=eliminate-okhttp3 Below need to edit in transforms.conf. [eliminate-okhttp3] REGEX = okhttp3 DEST_KEY = queue FORMAT = nullQueue Thanks, Dee
... View more