Hi @jigneshjsoni71 I just read through the previous questions you posted and you definitely need to go through the Search Tutorial before jumping into anything else at this point. Since no one on your team knows anything about Splunk, they are just going to have to wait until you get caught up to speed starting from the basics. Splunk is an awesome tool to use in any organization that deals with machine data, but it's not just some simple platform to master over night. There are great folks here that can help you (and want to help you), but you have to use the recommended resources first. ... View more

If you are asking questions about things like index, host and sourcetype I would highly recommend going through the tutorial documentation: http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial ... View more

Here's a rundown of all the ways you can get data into Splunk: http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchTutorial/AboutgettingdataintoSplunk Take some time to read the tutorial: http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchTutorial/WelcometotheSearchTutorial ... View more