default group

noun

A target group to which a forwarder routes event data when it doesn't fit into other defined target groups.

For example, you could arrange to have all events with the word "error" in them routed into one target group, all events with a sourcetype of "syslog" sent to a second target group, and all remaining events sent to a default group.

Related form

For more information

In the Distributed Deployment manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time