Splunk Search

index a file in a file system which can be mounted on different servers

bob87
Explorer

Hi

I would like to index a file which is in a file system which can be mounted on different servers at different points in time. On each of these servers there is a universal forwarder installed. How can I index this file without it being indexed all over again when the file system is mounted on another server?

Tags (1)
0 Karma

Ayn
Legend

You cannot, unless you can also have the Splunk installation located in the same file system and only have Splunk running when the file system is mounted.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...