https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311207#M58451 <P>I would like monitor all the files below except the first one<BR /> Because sample.log from environment a1 conusming more data and is not required to index<BR /> How to blacklist only this file from one environment?<BR /> How to achieve blacklist for folder level</P> <P>/logs/sample/enva1/logs/sample.log<BR /> /logs/sample/enva2/logs/sample.log<BR /> /logs/sample/enva3/logs/sample.log<BR /> /logs/sample/enva4/logs/sample.log<BR /> /logs/sample/enva2/logs/purple.log<BR /> /logs/sample/enva4/logs/purple.log</P> Mon, 20 Feb 2017 07:36:53 GMT splunkn 2017-02-20T07:36:53Z https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311207#M58451 <P>I would like monitor all the files below except the first one<BR /> Because sample.log from environment a1 conusming more data and is not required to index<BR /> How to blacklist only this file from one environment?<BR /> How to achieve blacklist for folder level</P> <P>/logs/sample/enva1/logs/sample.log<BR /> /logs/sample/enva2/logs/sample.log<BR /> /logs/sample/enva3/logs/sample.log<BR /> /logs/sample/enva4/logs/sample.log<BR /> /logs/sample/enva2/logs/purple.log<BR /> /logs/sample/enva4/logs/purple.log</P> Mon, 20 Feb 2017 07:36:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311207#M58451 splunkn 2017-02-20T07:36:53Z https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311208#M58452 <P>As one of the options you can define Blacklist in your inputs.conf for the monitor data input you currently have.</P> <PRE><CODE>[monitor://&lt;YourFolderStructure&gt;\enva*\logs\*] blacklist = &lt;YourFolderStructure&gt;\enva1\logs\* </CODE></PRE> <P>For information on Blacklisting refer to following documentation: <A href="https://docs.splunk.com/Documentation/Splunk/latest/Data/Whitelistorblacklistspecificincomingdata#Blacklist_.28ignore.29_files">https://docs.splunk.com/Documentation/Splunk/latest/Data/Whitelistorblacklistspecificincomingdata#Blacklist_.28ignore.29_files</A></P> Mon, 20 Feb 2017 07:52:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311208#M58452 niketn 2017-02-20T07:52:50Z https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311209#M58453 <P>@splunkn were you able to try the blacklist solution?</P> Tue, 21 Feb 2017 05:45:45 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-achieve-blacklist-for-folder-level/m-p/311209#M58453 niketn 2017-02-21T05:45:45Z