When using the splunk adapter, that can use the HTTP Event Collector, records are always send in the default index configured for the token.
HEC allows to specify the index.
For json event, by setting the index field in event metadata.
For records/raw event, by adding the index=<> query parameter
References :
When using the splunk adapter, that can use the
HTTP Event Collector, records are always send in the default index configured for the token.HEC allows to specify the index.
For json event, by setting the index field in event metadata.
For records/raw event, by adding the
index=<>query parameterReferences :