topic Re: Need input stanza for a shared drive in Getting Data In

Need input stanza for a shared drive

anandhalagarasa — Fri, 17 May 2019 06:37:41 GMT

Hi Team,

I have a following path which is located in a shared drive so how should i need to write the inputs.conf (monitor stanza)..

i.e
index=xyz
sourcetype=abc

So the full path for the log file folder would be:

M:\Local\orex\keen\Archive\Error_Path\

Here Local folder is a shared drive in between. So kindly help to provide the inputs.conf for the file.

Re: Need input stanza for a shared drive

harsmarvania57 — Fri, 17 May 2019 07:54:55 GMT

Hi,

Have you tried M:\Local\orex\keen\Archive\Error_Path\ in monitor stanza in inputs.conf ? If yes then is it not working ?

Re: Need input stanza for a shared drive

anandhalagarasa — Fri, 17 May 2019 08:09:14 GMT

I have already tried the way which you have suggested but still logs were not getting ingested into Splunk. And also currently I have tried this one as well. Since the folder "Local" is a shared one but still its not working.

[monitor://\M:\Local\orex\keen\Archive\Error_Path]

Hence kindly help

Re: Need input stanza for a shared drive

harsmarvania57 — Fri, 17 May 2019 08:16:22 GMT

Ok, I never tried this before but can you please run net use on command prompt on windows server and try to use Remote path in your monitor stanza ?

Have a look at comment by gkanapathy on https://answers.splunk.com/answers/1730/windows-mapped-drive-and-light-forwarding.html