<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Attempting to index a apache logs directory in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89416#M18552</link>
    <description>&lt;P&gt;It would help to have your current settings and parameters used for this input.&lt;/P&gt;</description>
    <pubDate>Tue, 16 Nov 2010 06:06:17 GMT</pubDate>
    <dc:creator>Simeon</dc:creator>
    <dc:date>2010-11-16T06:06:17Z</dc:date>
    <item>
      <title>Attempting to index a apache logs directory</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89415#M18551</link>
      <description>&lt;P&gt;I am attempting to index a apache logs directory. &lt;/P&gt;

&lt;P&gt;We use cronolog to split our apache log files
We have a sub directory rotate_logs that have historical logs in GZ format.&lt;/P&gt;

&lt;P&gt;I want to only index the error log files in /etc/httpd/logs and not the access logs or any time from subdirectories.&lt;/P&gt;</description>
      <pubDate>Tue, 16 Nov 2010 05:50:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89415#M18551</guid>
      <dc:creator>jslocomb</dc:creator>
      <dc:date>2010-11-16T05:50:48Z</dc:date>
    </item>
    <item>
      <title>Re: Attempting to index a apache logs directory</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89416#M18552</link>
      <description>&lt;P&gt;It would help to have your current settings and parameters used for this input.&lt;/P&gt;</description>
      <pubDate>Tue, 16 Nov 2010 06:06:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89416#M18552</guid>
      <dc:creator>Simeon</dc:creator>
      <dc:date>2010-11-16T06:06:17Z</dc:date>
    </item>
    <item>
      <title>Re: Attempting to index a apache logs directory</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89417#M18553</link>
      <description>&lt;P&gt;directory structure and exact filenames desired would help too&lt;/P&gt;</description>
      <pubDate>Tue, 16 Nov 2010 06:08:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89417#M18553</guid>
      <dc:creator>Genti</dc:creator>
      <dc:date>2010-11-16T06:08:19Z</dc:date>
    </item>
    <item>
      <title>Re: Attempting to index a apache logs directory</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89418#M18554</link>
      <description>&lt;P&gt;Sounds like you want a blacklist on the filename. You can also turn off recursion if you don't want to descend into subdirectories.&lt;/P&gt;

&lt;P&gt;For example:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[monitor:///etc/httpd/logs]
recursive = false
blacklist = \.gz$
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Take a look at:&lt;BR /&gt;
  &lt;A href="http://www.splunk.com/base/Documentation/4.1.5/admin/Inputsconf" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/4.1.5/admin/Inputsconf&lt;/A&gt;
&lt;BR /&gt;&lt;BR /&gt;and:&lt;BR /&gt;
&lt;A href="http://www.splunk.com/base/Documentation/4.1.5/admin/Whitelistorblacklistspecificincomingdata#Blacklist_.28ignore.29_files" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/4.1.5/admin/Whitelistorblacklistspecificincomingdata#Blacklist_.28ignore.29_files&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 16 Nov 2010 06:20:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Attempting-to-index-a-apache-logs-directory/m-p/89418#M18554</guid>
      <dc:creator>southeringtonp</dc:creator>
      <dc:date>2010-11-16T06:20:25Z</dc:date>
    </item>
  </channel>
</rss>

