Quantcast
Channel: Questions in topic: "universal-forwarder"
Viewing all articles
Browse latest Browse all 1551

Add index to default searched index in splunk light.

$
0
0
I'm forwarding traffic from a window file server to a splunk light instance. The index where the data is received is wineventlog. That index isn't searchable. How do I add that index to the default indexes being searched? The windows server uses the universal forwarder. Information I'm seeing on this topic seems to references making role changes, but this isn't showing as an option in Splunk light 6.3.3

Viewing all articles
Browse latest Browse all 1551

Trending Articles