https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14263#M1435 <P>No it does not.</P> Wed, 26 May 2010 07:21:31 GMT gkanapathy 2010-05-26T07:21:31Z https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14262#M1434 <P>Does Splunk lock the log file while we’re reading it? This would be on my Windows server IIS and Exchange.</P> Wed, 26 May 2010 03:46:37 GMT https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14262#M1434 skibum 2010-05-26T03:46:37Z https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14263#M1435 <P>No it does not.</P> Wed, 26 May 2010 07:21:31 GMT https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14263#M1435 gkanapathy 2010-05-26T07:21:31Z https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14264#M1436 <P>Tailing uses CreateFile with these flags:</P> <P>FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE</P> <P><A href="http://msdn.microsoft.com/en-us/library/aa363858%28VS.85%29.aspx" rel="nofollow">http://msdn.microsoft.com/en-us/library/aa363858%28VS.85%29.aspx</A></P> <P>There is no problem for another process to be writing to the file while Splunk is reading the same file.</P> Sat, 12 Jun 2010 06:49:16 GMT https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14264#M1436 Ledio_Ago 2010-06-12T06:49:16Z https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14265#M1437 <P>Note that if another program opens the file without the FILE_SHARE_READ flag, then either splunk will not be able to open the file, or the other program will not be able to open it if Splunk already has it open.</P> Mon, 28 Sep 2020 09:41:27 GMT https://community.splunk.com/t5/Getting-Data-In/Lock-files-on-Windows-server/m-p/14265#M1437 jrodman 2020-09-28T09:41:27Z