https://community.splunk.com/t5/Getting-Data-In/Blacklist-not-working/m-p/137731#M28343 <P>Try removing the full path name from the blacklist attribute.</P> <PRE><CODE>[monitor:///www/a/logs/*.log] blacklist = hotimportexport.log disabled = false index = main sourcetype = Test </CODE></PRE> Thu, 10 Jul 2014 18:58:12 GMT somesoni2 2014-07-10T18:58:12Z https://community.splunk.com/t5/Getting-Data-In/Blacklist-not-working/m-p/137730#M28342 <P>Dear Experts,<BR /> I am trying to blacklist a log file.<BR /> My Stanza looks like this which is located in /opt/splunkforwarder/etc/apps/search/local/inputs.conf</P> <P>[monitor:///www/a/logs/*.log]<BR /> blacklist = /www/a/logs/hotimportexport.log<BR /> disabled = false<BR /> index = main<BR /> sourcetype = Test</P> <P>Can someone please tell me why my blacklist is not working?</P> <P>Thanks,</P> Thu, 10 Jul 2014 18:35:39 GMT https://community.splunk.com/t5/Getting-Data-In/Blacklist-not-working/m-p/137730#M28342 ryu8450 2014-07-10T18:35:39Z https://community.splunk.com/t5/Getting-Data-In/Blacklist-not-working/m-p/137731#M28343 <P>Try removing the full path name from the blacklist attribute.</P> <PRE><CODE>[monitor:///www/a/logs/*.log] blacklist = hotimportexport.log disabled = false index = main sourcetype = Test </CODE></PRE> Thu, 10 Jul 2014 18:58:12 GMT https://community.splunk.com/t5/Getting-Data-In/Blacklist-not-working/m-p/137731#M28343 somesoni2 2014-07-10T18:58:12Z