Hi everyone, I’m new to Splunk and trying to set up log monitoring for a small streaming app I manage. The app generates logs in real time (JSON format), and I want to visualize them in Splunk for debugging and performance insights. I’ve installed Splunk Enterprise on my server, but I’m a bit confused about: The best way to forward logs from my app (HTTP Event Collector vs. Universal Forwarder?) How to structure the data inputs so I can build dashboards for error rates and streaming stats Could someone please guide me on the best practice for this kind of setup or share a simple example configuration? Thanks in advance! Ananya
... View more