https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460652#M79519 <P>What is the best way to monitor log files that are unique to a host? <BR /> For example, if hosta has log.x, and hostb has log.y, and so on, what would be the best way to define/import these logs from each individual host if they are unique to only one system within an environment?</P> Wed, 20 May 2020 19:29:49 GMT user789 2020-05-20T19:29:49Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460652#M79519 <P>What is the best way to monitor log files that are unique to a host? <BR /> For example, if hosta has log.x, and hostb has log.y, and so on, what would be the best way to define/import these logs from each individual host if they are unique to only one system within an environment?</P> Wed, 20 May 2020 19:29:49 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460652#M79519 user789 2020-05-20T19:29:49Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460653#M79520 <P>Perhaps <CODE>[monitor:///log.*]</CODE>?</P> Wed, 20 May 2020 20:12:32 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460653#M79520 richgalloway 2020-05-20T20:12:32Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460654#M79521 <P>I assume you want one deployed app for all the hosts.<BR /> Can you define the file names via a regex? </P> <P><A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/Specifyinputpathswithwildcards">https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/Specifyinputpathswithwildcards</A></P> <P>cheers<BR /> afx</P> Wed, 20 May 2020 20:15:27 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-unique-log-files/m-p/460654#M79521 afx 2020-05-20T20:15:27Z