Hi, Here is my inputs.conf file:
[default]
host = Hosta
[monitor:///MClogs/MC2016MC2Domain1_SP4/*.log]
hostname = Hosta
disabled = false
sourcetype = MC2016MC2_Domain1_Logs
index = gptr_Blade
[monitor:///MClogs/MC2016MC2Domain2_SP4/*.log]
hostname = Hosta
disabled = false
sourcetype = MC2016MC2_Domain2_Logs
index = gptr_Blade
[monitor:///MClogs/MC2016MC2Domain3_SP4/*.log]
hostname = Hosta
disabled = false
sourcetype = MC2016MC2_Domain3_Logs
index = gptr_Blade
The three log files are MC2016MC2Domain1_SP4.log, MC2016MC2Domain2_SP4.log and MC2016MC2Domain3_SP4.log. One in each of the respective paths defined above.
Yes, I am using single indexer with single host trying to forward 3 source using 1 forwarder. Please let me know if you need more info.
... View more