# # all Perforce log data should be sourcetype=perforce # [monitor://$SPLUNK_HOME/etc/apps/splunk-app-for-perforce/data/*] disabled = false followTail = 0 index = perforce sourcetype = perforce