is there a way to exclude all logs being indexed for a certain field  for eg : sourcetype=azs  container_name=moss-logger I want my HF to filter any data being ingested from particular field (conatiner_name) with value "moss-logger" ... View more

I have Jenkins App integrated with Splunk which requires token to interact with jenkins server and seems it expires after certain time(month) . So have to generate new token everytime it expires ...So is this expected behavior ? if not how do i fix this . ... View more

I have this use case were I cannot transfer the client data from country due to their policy and my whole Splunk infra reside in different geolocation. So my question is, what are the options do I have so that I do not have to set up the whole Splunk infra for just one client? Can heavy forwarder serve my purpose? ... View more