https://community.splunk.com/t5/Getting-Data-In/how-to-index-mutiple-files/m-p/84098#M17470 <P>i am importing data into splunk by using <STRONG>Continuously index data from a file or directory this Splunk instance can access</STRONG> <BR /> in splunk but after that when i am keeping new files the splunk is not taking automatically<BR /> actually i have to upload above 500 files in same index "USB".Manully uploading is very challenging. Can any one give me solution regarding this?</P> Tue, 09 Oct 2012 05:28:42 GMT Tridi123 2012-10-09T05:28:42Z https://community.splunk.com/t5/Getting-Data-In/how-to-index-mutiple-files/m-p/84098#M17470 <P>i am importing data into splunk by using <STRONG>Continuously index data from a file or directory this Splunk instance can access</STRONG> <BR /> in splunk but after that when i am keeping new files the splunk is not taking automatically<BR /> actually i have to upload above 500 files in same index "USB".Manully uploading is very challenging. Can any one give me solution regarding this?</P> Tue, 09 Oct 2012 05:28:42 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-index-mutiple-files/m-p/84098#M17470 Tridi123 2012-10-09T05:28:42Z https://community.splunk.com/t5/Getting-Data-In/how-to-index-mutiple-files/m-p/84099#M17471 <P>check is your files are not being skipped because they have the same exact first 256 chars, and therefore are considered as rotated files by the tailing processor.</P> <P>see <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/HowLogFileRotationIsHandled">http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/HowLogFileRotationIsHandled</A></P> <P>to force splunk to consider files are different : </P> <UL> <LI><P>use the crcSalt=<SOURCE> option to differenciate per filename<BR /> see <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Inputsconf">http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Inputsconf</A></SOURCE></P></LI> <LI><P>or make sure that your files have different patterns on the first line (a timestamp by example)</P></LI> </UL> Tue, 09 Oct 2012 05:39:37 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-index-mutiple-files/m-p/84099#M17471 yannK 2012-10-09T05:39:37Z