https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65987#M13255 <P>It's in inputs.conf now. Check the docs and this answer.</P> <P><A href="http://splunk-base.splunk.com/answers/47427/is-crcsalt-still-supported">http://splunk-base.splunk.com/answers/47427/is-crcsalt-still-supported</A></P> Fri, 01 Jun 2012 18:05:51 GMT sdaniels 2012-06-01T18:05:51Z https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65986#M13254 <P>I'm running Splunk 4.3.1 build 119532. I'm getting errors at startup saying that the crcSalt = <SOURCE> line in props.conf may be a typo. I've found I've always needed this setting if I want to index something like a config file where only a small part of the file might change and the file name stays the same. </SOURCE></P> <P>Has this config option been deprecated and if so, is there an equivalent command that will provide the same functionality?</P> Fri, 01 Jun 2012 17:55:17 GMT https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65986#M13254 responsys_cm 2012-06-01T17:55:17Z https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65987#M13255 <P>It's in inputs.conf now. Check the docs and this answer.</P> <P><A href="http://splunk-base.splunk.com/answers/47427/is-crcsalt-still-supported">http://splunk-base.splunk.com/answers/47427/is-crcsalt-still-supported</A></P> Fri, 01 Jun 2012 18:05:51 GMT https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65987#M13255 sdaniels 2012-06-01T18:05:51Z https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65988#M13256 <P>try with source in CAPS.<BR /> in inputs.conf<BR /> [monitor://mypath]<BR /> crcSalt = <SOURCE></SOURCE></P> Fri, 01 Jun 2012 21:40:21 GMT https://community.splunk.com/t5/Getting-Data-In/is-crcSalt-deprecated/m-p/65988#M13256 yannK 2012-06-01T21:40:21Z