https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382426#M68942 <P>Try this:</P> <PRE><CODE>index=_* okta_radius (ERROR OR WARN* OR FAIL* OR CANNOT OR TIMEOUT OR CRASH* OR UNABLE) </CODE></PRE> Thu, 14 Feb 2019 06:31:02 GMT woodcock 2019-02-14T06:31:02Z https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382423#M68939 <P>Below is the path I am trying to monitor<BR /> C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\logs\okta_radius and I used the following monitoring stanza</P> <P>[monitor://C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\logs\okta_radius]<BR /> index = okta<BR /> sourcetype = okta_radius</P> <P>Is this the correct stanza or syntax?</P> Tue, 29 Sep 2020 23:14:06 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382423#M68939 vrmandadi 2020-09-29T23:14:06Z https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382424#M68940 <P>That is a perfectly reasonable and fully functional setting.</P> Thu, 14 Feb 2019 03:22:12 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382424#M68940 woodcock 2019-02-14T03:22:12Z https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382425#M68941 <P>Thank you.So it should be an issue with permission .Can we check specifically internal logs to see the error</P> Thu, 14 Feb 2019 04:26:20 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382425#M68941 vrmandadi 2019-02-14T04:26:20Z https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382426#M68942 <P>Try this:</P> <PRE><CODE>index=_* okta_radius (ERROR OR WARN* OR FAIL* OR CANNOT OR TIMEOUT OR CRASH* OR UNABLE) </CODE></PRE> Thu, 14 Feb 2019 06:31:02 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-monitor-windows-path/m-p/382426#M68942 woodcock 2019-02-14T06:31:02Z