How to avoid duplicate indexing from HTTP event co...

Getting Data In

I have an application which send event to HTTP event collector and writes a backup log to disk.

Can I somehow configure Splunk to index a log file, incase HTTP endpoint will be unavailable?
How could I deduplicate the events?

Get Updates on the Splunk Community!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

How to avoid duplicate indexing from HTTP event collector and file