Hello all,
I have been trying to get out environments/indexes organized and I'm running in to some trouble. I am trying to set up our different development environments in to different indexes. As such, I am creating apps for all the different sourcetypes and indexes necessary for this. My prod and dev apps have been working great, but when I am trying to create another app for a test environment I can not get the servers to report to splunk. I have gotten these servers to report using the existing prod app (but to the prod index) by adding them to the prod server class. The inputs.conf file is the only thing with a difference (different value for index), but this difference makes it so I can't get data back from the servers.
Is there something I need to do to set up an index to get servers reporting to it? Or should making an app with a different index name be sufficient.
Any help or ideas are greatly appreciated.
... View more