Given multiple locations with Splunk heavies or edge processors, is there a way at the heavy or edge processor to add a tag or some other relevant piece of identifying information that would identify the site that data came from? I would like to send data from various locations to a single set of indexers and be able to identify where that came from without having to use something like the assets lookup to figure it out.
... View more