https://community.splunk.com/t5/Getting-Data-In/Directory-monitoring/m-p/177069#M35508 <P>Is it possible to monitor a directory with Splunk? When I say monitor a directory I am not interested in the contents of the files in the directory. I am an interested in logging the filenames and timestamps of the files in the directory.</P> Fri, 23 May 2014 14:42:10 GMT DonDandrea 2014-05-23T14:42:10Z https://community.splunk.com/t5/Getting-Data-In/Directory-monitoring/m-p/177069#M35508 <P>Is it possible to monitor a directory with Splunk? When I say monitor a directory I am not interested in the contents of the files in the directory. I am an interested in logging the filenames and timestamps of the files in the directory.</P> Fri, 23 May 2014 14:42:10 GMT https://community.splunk.com/t5/Getting-Data-In/Directory-monitoring/m-p/177069#M35508 DonDandrea 2014-05-23T14:42:10Z https://community.splunk.com/t5/Getting-Data-In/Directory-monitoring/m-p/177070#M35509 <P>Yes, the feature is called "fschange monitor" and you use it like this in <CODE>inputs.conf</CODE></P> <PRE><CODE>[fschange:&lt;path&gt;] </CODE></PRE> <P>However, the feature is deprecated (although it hasn't been removed yet), so you might want to look at this<BR /> <A href="http://answers.splunk.com/answers/67574/fschange-deprecated-what-options-are-available">fschange deprecated, what are the options</A></P> <P>Also, Splunk cannot do fschange and a regular monitor over the same files/directories.</P> Fri, 23 May 2014 16:11:10 GMT https://community.splunk.com/t5/Getting-Data-In/Directory-monitoring/m-p/177070#M35509 lguinn2 2014-05-23T16:11:10Z