NiFi has a putSplunk processor that should do what I want (send data to an indexer)
BUT it doesn't have any place for me to specify sourcetype, or index, and it only has one "Host" field, whereas I usually use autolb with 2 indexers.
Can I do this? If so, how?
Thanks!
↧