We followed the steps in https://docs.splunk.com/Documentation/DM/1.8.1/User/AWSAbout to onboard the data from a single AWS account. During the process onboarding data, AWS account details are input using the UI, following which Splunk generates the Cloud Formation Template. This template has the a DM_ID, DM_Name and few indexes which Splunk generates. Does Splunk have API to script this? Our DevOps team wants to automate this process. ps: I was unable to find this in the API documentation. ... View more

Hello, Below is the existing stanza in the inputs.conf [monitor:///var/log] whitelist=(\.log|log$|messages|secure|auth|mesg$|cron$|acpid$|\.out) blacklist=(lastlog|anaconda\.syslog) disabled = 1 I also want to add the following folder to be blacklist /var/log/dynatrace and any logs within the folder/sub folders. Can you please explain how this can be done? Is the syntax below correct? blacklist=(lastlog|anaconda\.syslog)|(dynatrace) Appreciate your experience and help. ... View more