Hello.
I'm trying to send log from heavy forwarder to 2 indexes. One is receiving logs, but the second is not.
Here is the props.conf file:
[test] TRANSFORMS-routing=errorRouting,successRouting
Here is the outputs.conf file:
[tcpout:errorGroup] server = 35.196.124.233:9997
[tcpout:successGroup] server = 34.138.8.216:9997
Here is the transforms.conf file:
[errorRouting] REGEX=. DEST_KEY=_TCP_ROUTING FORMAT=errorGroup
[successRouting] REGEX=. DEST_KEY=_TCP_ROUTING FORMAT=successGroup
What could be the problem?
... View more