You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When configuring a HEC in Splunk it requires a default index to be specified, which get used if no "index" if specified in the HEC request.
Given this, it would be useful to make it optional in Splunk Handler, that way, if a change is needed of the back-end (i.e. migrating to different index), it avoids the next to also update the code.
The text was updated successfully, but these errors were encountered:
Hi
When configuring a HEC in Splunk it requires a default index to be specified, which get used if no "index" if specified in the HEC request.
Given this, it would be useful to make it optional in Splunk Handler, that way, if a change is needed of the back-end (i.e. migrating to different index), it avoids the next to also update the code.
The text was updated successfully, but these errors were encountered: