https://community.splunk.com/t5/Getting-Data-In/How-to-configure-inputs-conf-to-separate-files-monitored-in-a/m-p/129912#M26708 <P>The answer was:</P> <PRE><CODE> [monitor://D:\CDR\cdr*] disabled = false index = cdr sourcetype = cdr [monitor://D:\CDR\cmr*] disabled = false index = cdr sourcetype = cmr </CODE></PRE> <P>Thanks to s72ucor in the #splunk Channel</P> Wed, 04 Feb 2015 15:35:47 GMT PPape 2015-02-04T15:35:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-inputs-conf-to-separate-files-monitored-in-a/m-p/129911#M26707 <P>Hey Guys,</P> <P>I'm trying to index Data via File Monitor</P> <PRE><CODE>[monitor://D:\CDR] disabled = false index = cdr sourcetype = cdr </CODE></PRE> <P>This works just fine, but now I want to separate the files in this Directory there are </P> <PRE><CODE>cdr[generic Name]_[Date] and cmd[generic Name]_[Date] </CODE></PRE> <P>so I tried </P> <PRE><CODE>[monitor://D:\CDR] disabled = false index = cdr sourcetype = cdr whitelist = ^cdr [monitor://D:\CDR] disabled = false index = cdr sourcetype = cmr whitelist = ^cmr </CODE></PRE> <P>But this doesn't work. <BR /> EDIT: No Files are indexed when I use it like shown above</P> <P>Is my RegEx wrong? What am I doing wrong?</P> <P>Thanks for Helping!</P> Wed, 04 Feb 2015 14:59:03 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-inputs-conf-to-separate-files-monitored-in-a/m-p/129911#M26707 PPape 2015-02-04T14:59:03Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-inputs-conf-to-separate-files-monitored-in-a/m-p/129912#M26708 <P>The answer was:</P> <PRE><CODE> [monitor://D:\CDR\cdr*] disabled = false index = cdr sourcetype = cdr [monitor://D:\CDR\cmr*] disabled = false index = cdr sourcetype = cmr </CODE></PRE> <P>Thanks to s72ucor in the #splunk Channel</P> Wed, 04 Feb 2015 15:35:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-inputs-conf-to-separate-files-monitored-in-a/m-p/129912#M26708 PPape 2015-02-04T15:35:47Z