Quantcast
Channel: Questions in topic: "heavy-forwarder"
Viewing all articles
Browse latest Browse all 727

Populate event with extra fields as global default on forwarders.

$
0
0
Hi, I would like to populate all forwarded events (from various stanzas) with a centralised list of field:value pairs. Can this be achieved in a centralised location, avoiding the need to write individual transforms for each sourcetype? Thank you in advance.

Viewing all articles
Browse latest Browse all 727

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>