topic Re: Folder monitoring and whitelist in Getting Data In

Folder monitoring and whitelist

kennethyeung — Fri, 23 Mar 2018 15:42:14 GMT

i used web to setup the folder monitor
settng -> Data inputs » Files & directories »
but in the whitelist if i *.csv , it wont index even the file extension is csv.

i saw the doc is to edit inputs.conf

but in the system/local/inputs.conf i cannot find the folder path i setup in web.
so dont know where it is

Thanks

Re: Folder monitoring and whitelist

richgalloway — Fri, 23 Mar 2018 15:48:00 GMT

The inputs.conf file will be saved under the app you were using when you selected Settings->Data Inputs. It's not likely to be in system/local. Try search/local and if it's not there, use your Linux-fu to find the inputs.conf file that changed most recently.

Once you find the file, post the relevant stanza here and we can help you fix it.

Re: Folder monitoring and whitelist

kennethyeung — Fri, 23 Mar 2018 15:57:24 GMT

Thanks, i found the correct inputs.conf
if i want to only index csv and *.idx
.csv$|.idx$

am i correct, i will keep monitor a while
Thank again

Re: Folder monitoring and whitelist

desmondw_splunk — Fri, 23 Mar 2018 16:34:00 GMT

Hi,
I think the syntax should be like :-
whitelist = \.csv$|\.idx$

Cheers !