Splunk Search

Do newly added tags get updated for already indexed data or only new incoming data?

rsathish47
Contributor

Hello All,

Does the newly added tags get updated for already indexed data OR it applies for new in-coming data?

Thanks
Sathish R

Tags (1)
1 Solution

somesoni2
Revered Legend

A tag applies to any indexed data, new or old.

View solution in original post

somesoni2
Revered Legend

A tag applies to any indexed data, new or old.

somesoni2
Revered Legend

Its a search time feature, should be available in search head server.

0 Karma

rsathish47
Contributor

Small query is tags.conf files as to place in index server or search head server?

0 Karma

rsathish47
Contributor

Thanks somesoni2

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...