You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22 lines
554 B
22 lines
554 B
# Version 9.2.2.20240415
|
|
# these here just override and disable stuff that in system/default.
|
|
|
|
################################
|
|
# Data thru parsingQueue always
|
|
################################
|
|
|
|
[splunktcp]
|
|
route=has_key:tautology:parsingQueue;absent_key:tautology:parsingQueue
|
|
|
|
################################
|
|
# Make sure these get forwarded
|
|
################################
|
|
|
|
[monitor://$SPLUNK_HOME/var/log/splunk/splunkd.log]
|
|
_TCP_ROUTING = *
|
|
index = _internal
|
|
|
|
[monitor://$SPLUNK_HOME/var/log/splunk/metrics.log]
|
|
_TCP_ROUTING = *
|
|
index = _internal
|