<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk Not ingesting in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Not-ingesting/m-p/680358#M113677</link>
    <description>&lt;PRE&gt;Referring to the below  inputs.conf for one of my windows server , as you can see, there is some whitespace at the end of the first line before the closing bracket. The "folderA" is the folder where the contents, splunk should be ingesting but is not (there are multiple log files inside). Is there a possibility that because of this whitespace Splunk may not be ingesting the logs? And if yes, any explanation on this so that we can explain/advise to the client.&lt;BR /&gt;&lt;BR /&gt;" &lt;BR /&gt;[monitor://C:\Program Files\somepath\folderA  ]
index=someindex
sourcetype=somesourcetype&lt;BR /&gt;   "&lt;/PRE&gt;</description>
    <pubDate>Tue, 12 Mar 2024 07:35:48 GMT</pubDate>
    <dc:creator>YJ</dc:creator>
    <dc:date>2024-03-12T07:35:48Z</dc:date>
    <item>
      <title>Splunk Not ingesting</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Not-ingesting/m-p/680358#M113677</link>
      <description>&lt;PRE&gt;Referring to the below  inputs.conf for one of my windows server , as you can see, there is some whitespace at the end of the first line before the closing bracket. The "folderA" is the folder where the contents, splunk should be ingesting but is not (there are multiple log files inside). Is there a possibility that because of this whitespace Splunk may not be ingesting the logs? And if yes, any explanation on this so that we can explain/advise to the client.&lt;BR /&gt;&lt;BR /&gt;" &lt;BR /&gt;[monitor://C:\Program Files\somepath\folderA  ]
index=someindex
sourcetype=somesourcetype&lt;BR /&gt;   "&lt;/PRE&gt;</description>
      <pubDate>Tue, 12 Mar 2024 07:35:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-Not-ingesting/m-p/680358#M113677</guid>
      <dc:creator>YJ</dc:creator>
      <dc:date>2024-03-12T07:35:48Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk Not ingesting</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Splunk-Not-ingesting/m-p/680359#M113678</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/260002"&gt;@YJ&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;please try this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;[monitor://C:\Program Files\somepath\folderA*\*]
index=someindex
sourcetype=somesourcetype&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2024 08:02:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Splunk-Not-ingesting/m-p/680359#M113678</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2024-03-12T08:02:49Z</dc:date>
    </item>
  </channel>
</rss>

