Splunk Search

make the WAS app index independent

yannK
Splunk Employee
Splunk Employee

I do not want to use the index "websphere" for my data.
Instead of hardcoding index=websphere everywhere,
please use a macro that way we will be able to customize the index list.

example of macro : WAS_index
index=webshpere OR index=myindex OR index=myotherindex

0 Karma

vserebryany
New Member

I am not sure if this is a suggestion or already a solution. If the later I would very much like to see the more detailed explanation. I need to configure univ forwarders across number of cells and i need a flexible scriptable way of directing the inputs app to which index to send the data. Will macro work on UF 5.x. Thanks!

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...