topic How to specify |fschange directory in inputs.conf? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-specify-fschange-directory-in-inputs-conf/m-p/601995#M104872 <P>Current one that is working is:<BR />[fschange:F:\bau\box\quest]<BR /><BR />Need to specify it to:<BR />[fschange:F:\bau\box\quest\...\arch]<BR /><BR />Where quest has 5 folders, inside of each has a folder \arch<BR /><BR />But seems not working using \ ... \ or \*\<BR /><BR />It is a forwarder and already restarted it as well.<BR /><BR /><BR /><BR /></P> Thu, 16 Jun 2022 20:07:50 GMT Shadolu 2022-06-16T20:07:50Z How to specify |fschange directory in inputs.conf? https://community.splunk.com/t5/Getting-Data-In/How-to-specify-fschange-directory-in-inputs-conf/m-p/601995#M104872 <P>Current one that is working is:<BR />[fschange:F:\bau\box\quest]<BR /><BR />Need to specify it to:<BR />[fschange:F:\bau\box\quest\...\arch]<BR /><BR />Where quest has 5 folders, inside of each has a folder \arch<BR /><BR />But seems not working using \ ... \ or \*\<BR /><BR />It is a forwarder and already restarted it as well.<BR /><BR /><BR /><BR /></P> Thu, 16 Jun 2022 20:07:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-specify-fschange-directory-in-inputs-conf/m-p/601995#M104872 Shadolu 2022-06-16T20:07:50Z