The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: Posted by przygode
| Topic | Author | Replies | Latest Post |
|---|---|---|---|
|
How to index only certain events from IIS weblogs?
In: SplunkAdministration
(Not tagged)
I want to index only 404s and 500 errors from particular IIS log files. I have the following in props.conf.
[iis-6]
REPORT-AutoHeader ...
|
1
|
23 months ago... |