topic Wildcard for subfolders in Getting Data In

Wildcard for subfolders

joshftx — Mon, 28 Nov 2011 22:06:00 GMT

I need to index a CSV file that gets created daily in a folder with that day's name on it.
So today's path is ..long path...\default\20111128\2Eb4DcXy.csv

Can I use wildcards or a variable for date in the inputs.conf in order to grab this file? Like this: ..long path....\default\ * \2Eb4DcXy.csv

Re: Wildcard for subfolders

tgow — Mon, 28 Nov 2011 22:27:18 GMT

You can use the "..." syntax to recurse directories and

Here is an example in the inputs.conf file:

[monitor::...default...2Eb4Dcy.csv]

[monitor::...default*2Eb4Dcy.csv]

[monitor::...default...]

Here is a link to more information:

http://docs.splunk.com/Documentation/Splunk/4.2.4/Data/Specifyinputpathswithwildcards

Re: Wildcard for subfolders

joshftx — Tue, 29 Nov 2011 22:44:33 GMT

Does this work for Windows sources also?

Re: Wildcard for subfolders

Takajian — Thu, 01 Dec 2011 07:49:41 GMT

Yes, this work on linux and Windows as well.