https://community.splunk.com/t5/Getting-Data-In/How-to-monitor-2-different-file-types-in-the-same-folder/m-p/100018#M20888 <P>I would setup 2 separate monitor stanzas that monitor the folder. <BR /> In each stanza I would create a whitelist for the specific file type, such as:</P> <P>[monitor:///mnt/logs/*.log]<BR /> index=test1</P> <P>[monitor:///mnt/logs/*.txt]<BR /> index=test2</P> <P>This should direct the .log events to the test1 index and send .txt to test2.</P> Thu, 18 Apr 2013 17:24:38 GMT DerekB 2013-04-18T17:24:38Z https://community.splunk.com/t5/Getting-Data-In/How-to-monitor-2-different-file-types-in-the-same-folder/m-p/100017#M20887 <P>If I need to monitor 2 different file types in the same folder and send them to different indexes, how do I do that?</P> Thu, 18 Apr 2013 17:20:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-monitor-2-different-file-types-in-the-same-folder/m-p/100017#M20887 splunkIT 2013-04-18T17:20:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-monitor-2-different-file-types-in-the-same-folder/m-p/100018#M20888 <P>I would setup 2 separate monitor stanzas that monitor the folder. <BR /> In each stanza I would create a whitelist for the specific file type, such as:</P> <P>[monitor:///mnt/logs/*.log]<BR /> index=test1</P> <P>[monitor:///mnt/logs/*.txt]<BR /> index=test2</P> <P>This should direct the .log events to the test1 index and send .txt to test2.</P> Thu, 18 Apr 2013 17:24:38 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-monitor-2-different-file-types-in-the-same-folder/m-p/100018#M20888 DerekB 2013-04-18T17:24:38Z