https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22593#M3503 <P>Hello,</P> <P>I'd like to forward the <STRONG><EM>SetupAPI.dev.log</EM></STRONG> to Splunk, but I'm not sure what stanza to put into the inputs.conf file. Any ideas?</P> <P>Thanks</P> Thu, 01 Aug 2013 18:29:44 GMT dctopper 2013-08-01T18:29:44Z https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22593#M3503 <P>Hello,</P> <P>I'd like to forward the <STRONG><EM>SetupAPI.dev.log</EM></STRONG> to Splunk, but I'm not sure what stanza to put into the inputs.conf file. Any ideas?</P> <P>Thanks</P> Thu, 01 Aug 2013 18:29:44 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22593#M3503 dctopper 2013-08-01T18:29:44Z https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22594#M3504 <P>Add following in %SPLUNK_HOME%\etc\system\local\inputs.conf</P> <P>[monitor://c:\Program Files(x86)\path_to\SetupAPI.dev.log]<BR /> disabled = false<BR /> followTail = 0</P> <P>more info can be seen at <A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/Data/Editinputs.conf">http://docs.splunk.com/Documentation/Splunk/5.0.3/Data/Editinputs.conf</A></P> Thu, 01 Aug 2013 18:40:10 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22594#M3504 zoh 2013-08-01T18:40:10Z https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22595#M3505 <P>Awesome. Thank you.</P> Thu, 01 Aug 2013 19:03:56 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Splunk-forwarder-inputs-other-than-WinEventLogs/m-p/22595#M3505 dctopper 2013-08-01T19:03:56Z