<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic input stanza for on prem codedeploy logs in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/input-stanza-for-on-prem-codedeploy-logs/m-p/335973#M62115</link>
    <description>&lt;P&gt;we use codedeploy to deploy to some of our on prem servers with the codedepoy agent&lt;BR /&gt;
it logs to C:\Deployments\xxxxxx-Web\LogHtml      and the log is an html &lt;BR /&gt;
the log file is named like :&lt;BR /&gt;&lt;BR /&gt;
xxxxxx-Web_xxxxxx-Web_2018-03-05_05-06-57.html&lt;/P&gt;

&lt;P&gt;I am using:&lt;BR /&gt;
[monitor://C:\Deployments\xxxxxx-Web\LogHtml*.html]&lt;BR /&gt;
disabled = false&lt;BR /&gt;
sourcetype = web&lt;BR /&gt;
index = xxxxxxx&lt;/P&gt;

&lt;P&gt;And I am not getting anything from this location in my index&lt;BR /&gt;&lt;BR /&gt;
any ideas    &lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 18:21:07 GMT</pubDate>
    <dc:creator>bobmccoy</dc:creator>
    <dc:date>2020-09-29T18:21:07Z</dc:date>
    <item>
      <title>input stanza for on prem codedeploy logs</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/input-stanza-for-on-prem-codedeploy-logs/m-p/335973#M62115</link>
      <description>&lt;P&gt;we use codedeploy to deploy to some of our on prem servers with the codedepoy agent&lt;BR /&gt;
it logs to C:\Deployments\xxxxxx-Web\LogHtml      and the log is an html &lt;BR /&gt;
the log file is named like :&lt;BR /&gt;&lt;BR /&gt;
xxxxxx-Web_xxxxxx-Web_2018-03-05_05-06-57.html&lt;/P&gt;

&lt;P&gt;I am using:&lt;BR /&gt;
[monitor://C:\Deployments\xxxxxx-Web\LogHtml*.html]&lt;BR /&gt;
disabled = false&lt;BR /&gt;
sourcetype = web&lt;BR /&gt;
index = xxxxxxx&lt;/P&gt;

&lt;P&gt;And I am not getting anything from this location in my index&lt;BR /&gt;&lt;BR /&gt;
any ideas    &lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 18:21:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/input-stanza-for-on-prem-codedeploy-logs/m-p/335973#M62115</guid>
      <dc:creator>bobmccoy</dc:creator>
      <dc:date>2020-09-29T18:21:07Z</dc:date>
    </item>
    <item>
      <title>Re: input stanza for on prem codedeploy logs</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/input-stanza-for-on-prem-codedeploy-logs/m-p/335974#M62116</link>
      <description>&lt;P&gt;If &lt;CODE&gt;C:\Deployments\xxxxxx-Web\LogHtml&lt;/CODE&gt; is the directory name and &lt;CODE&gt;xxxxxx-Web_xxxxxx-Web_2018-03-05_05-06-57.html&lt;/CODE&gt; is the file name, your monitoring stanza should be like this&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[monitor://C:\Deployments\*-Web\LogHtml\*-Web_*.html]
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 08 Mar 2018 17:29:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/input-stanza-for-on-prem-codedeploy-logs/m-p/335974#M62116</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2018-03-08T17:29:40Z</dc:date>
    </item>
  </channel>
</rss>

