…right
So for your nonprod stuff, plop them in different indices
But the source types, presumably, won't be [much] different
So push nonprod data into the non prod index(es)
March 11, 2020 at 01:04AM
via reddit https://www.reddit.com/r/Splunk/comments/fgrkms/how_can_i_monitor_qa_or_nonprod_or_preprod/fk6idwp?utm_source=ifttt