Ctrlk
Product Documentation
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Create the Anvilogic indexes

Create the required custom indexes on the Splunk platform.

The Anvilogic App for Splunk requires custom Splunk indexes used by the HTTP Event Collector (HEC) collector command for auditing, metrics and reporting:

  1. Create an index named <your-org-name>_anvilogic for storing Anvilogic rule output and auditing the app. See Create events indexes in the Splunk Enterprise Managing Indexers and Clusters of Indexers manual.

  2. Create a metrics index named <your-org-name>_anvilogic_metrics for storing the output of baselining rules. See Create metrics indexes in the Splunk Enterprise Managing Indexers and Clusters of Indexers manual.

Next step

Assign the avl_admin role.

Last updated