If you put one of this REGEX you will redirect all your events from your "source" in some_other_index. If you want to redirect only one part of the source, you need to use some keywords (which is only in events that you want redirect in other index) in your REGEX. The better REGEX to match "all" with only one match >> .* and without any group ... View more

The jar files should be placed under splunk_app_db_connect/drivers, and you should to reload the drivers page on GUI toinstall it ... View more

The jar files should be placed under splunk_app_db_connect/drivers, and you should to reload the drivers page on GUI toinstall it ... View more