topic How do I linux directory in Deployment Architecture

How do I linux directory

nhsplunk — Fri, 29 Oct 2010 21:46:33 GMT

I went through Manager -> Data Inputs -> Files & Directories and chose "Monitor a file or directory" option. I entered the full Linux server path, but where do I specify credentials for linux server login?

Re: How do I linux directory

ftk — Fri, 29 Oct 2010 22:29:13 GMT

Splunk will use the credentials its process runs under to access any configured monitors.

Re: How do I linux directory

skippylou — Fri, 29 Oct 2010 23:27:01 GMT

Taking a guess here, but wondering if you think that setting up the file/directory monitoring there pertains to machines other than where splunk is currently installed on. That Data Input screen for Files & Directories is referencing the actual host that splunk is running on - and as ftk mentions the files/directories you want to monitor need to be accessible by the account splunk is running as.

However, I think you are talking about monitoring files and directories on remote machines to get indexed into splunk. If so, you'll want to look at 'Forwarding and Receiving' as the best option.

http://www.splunk.com/base/Documentation/latest/Admin/Aboutforwardingandreceiving

Hope that helps,

scott