topic Re: Are inputs.conf attribute values case sensitive? in Getting Data In

Are inputs.conf attribute values case sensitive?

Madhan45 — Thu, 21 Sep 2017 09:39:12 GMT

[monitor:///tmp/ABC.txt] is my monitor stanza.

But if i have the file welcomeabcdef.txt that is "abc" (lowercase instead of uppercase) will it be read and indexed by Splunk?

Re: Are inputs.conf attribute values case sensitive?

Madhan45 — Thu, 21 Sep 2017 09:40:37 GMT

Setting:
[monitor:///tmp/ABC.txt]

File name :
welcomeabcdef.txt

Re: Are inputs.conf attribute values case sensitive?

gcusello — Thu, 21 Sep 2017 09:44:51 GMT

Hi Madhan45,
path after monitor:// is a unix path that is case sensitive!
This problem isn't present on Windows.
I usually test on shell every monitor stanza to be sure that result is the one I want.

Bye.
Giuseppe

Re: Are inputs.conf attribute values case sensitive?

Madhan45 — Thu, 21 Sep 2017 09:50:03 GMT

Thanks for response Giuseppe.

so you meant to say "(astric)ABC(actric).txt", will not capture "welcomeabcde.txt" file in unix?

Is my understanding is correct?

Re: Are inputs.conf attribute values case sensitive?

gcusello — Thu, 21 Sep 2017 09:55:49 GMT

yes,
you can test it in linux with the command

ls -al /your_path/*ABC*.txt

Anyway, you have to create two stanzas in inputs.conf.

Bye.
Giuseppe

Re: Are inputs.conf attribute values case sensitive?

Madhan45 — Thu, 21 Sep 2017 10:08:45 GMT

Ok thanks.

Re: Are inputs.conf attribute values case sensitive?

gcusello — Thu, 21 Sep 2017 11:26:14 GMT

if, this solution satisfies your question,please accept or upvote it.
Bye.
giuseppe

Re: Are inputs.conf attribute values case sensitive?

lfedak_splunk — Fri, 22 Sep 2017 00:05:43 GMT

Hey Madhan45, if they
solved your problem, please don't forget to accept an answer! You can upvote posts as well. (Karma points will be awarded for either action.) Happy Splunking!