Answer Posted / Raju Ram
In Splunk, Global File Precedence refers to the order in which data sources (indexes) are searched when multiple data sources contain the same event. The order of precedence is: app >> local >> index >> default.nThis means that events will first be searched for in the specified app's data sources, then in the local data sources, followed by the indexed data sources, and finally in the default data source.
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers