splunk-connect-for-syslog
splunk-connect-for-syslog copied to clipboard
Docs: configuration path to filter events from output
There is an example showing how to Filter events from output.
But it is not clear where lines like those should go.
There was #2548 in which it was advised to put the config in a file on /opt/sc4s/local/config/app_parsers.
It'd be very useful to make this explicit in the docs.