topic Moving /var/opt/splunk directory, does not result in query the metrics in Getting Data In

Moving /var/opt/splunk directory, does not result in query the metrics

mkelderm — Thu, 24 Jan 2013 10:55:39 GMT

In the log.cfg, I changed my directory of the $SPLUNK_HOME/var/log files destications. Now I am unable to query the *metrics.log files? No results.... I have restared Splunk> off course. Any idea what can be wrong?

marc

Re: Moving /var/opt/splunk directory, does not result in query the metrics

Ayn — Thu, 24 Jan 2013 10:59:01 GMT

Well in what location have you configured Splunk to look for the *metrics.log files? If you move the files, you'll have to change the monitors too.

Re: Moving /var/opt/splunk directory, does not result in query the metrics

mkelderm — Thu, 24 Jan 2013 11:00:42 GMT

from $SPLUNK_HOME/var/log/splunk to /var/log/splunk. In which file are the monitors located?

Re: Moving /var/opt/splunk directory, does not result in query the metrics

Ayn — Thu, 24 Jan 2013 11:43:38 GMT

in $SPLUNK_HOME/etc/system/default/inputs.conf