I have a test environment(search head) in which there aren't any events. Now I want to do some data cloning and get some dummy events to my Testing search head. For that I'm thinking of getting those events from a heavy forwarder. But not sure how it can be done. I'm not much of a technical person. So any clear explanation would be helpful for me to getting understand.
Any .conf files to be configured to get that done? If yes where should I have to do that either in heavy forwarder side or search head side?
↧