https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475870#M81666 <P>i am using Splunk enterprise trial version and trying to push the windows logs to Splunk from the customize location . I gave the path location of my file which i want to push in /etc/system/local folder inside input.conf file and restarted the splunk server but still i could not able to see the file in splunk.<BR /> I have followed the below documents to add the stanza in the input.conf file <BR /> <A href="https://docs.splunk.com/Documentation/Splunk/8.0.1/Data/Monitorfilesanddirectorieswithinputs.conf">https://docs.splunk.com/Documentation/Splunk/8.0.1/Data/Monitorfilesanddirectorieswithinputs.conf</A> </P> <P>Can anyone please guide me in this as how to push the file ti splunk from a customize location<BR /> Note- I made the changes in the input.conf file inside splunk universal forwarder directory as i dont have $splunk_home file directory</P> Tue, 07 Jan 2020 11:26:32 GMT rajiv_r 2020-01-07T11:26:32Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475870#M81666 <P>i am using Splunk enterprise trial version and trying to push the windows logs to Splunk from the customize location . I gave the path location of my file which i want to push in /etc/system/local folder inside input.conf file and restarted the splunk server but still i could not able to see the file in splunk.<BR /> I have followed the below documents to add the stanza in the input.conf file <BR /> <A href="https://docs.splunk.com/Documentation/Splunk/8.0.1/Data/Monitorfilesanddirectorieswithinputs.conf">https://docs.splunk.com/Documentation/Splunk/8.0.1/Data/Monitorfilesanddirectorieswithinputs.conf</A> </P> <P>Can anyone please guide me in this as how to push the file ti splunk from a customize location<BR /> Note- I made the changes in the input.conf file inside splunk universal forwarder directory as i dont have $splunk_home file directory</P> Tue, 07 Jan 2020 11:26:32 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475870#M81666 rajiv_r 2020-01-07T11:26:32Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475871#M81667 <P>Please post the inputs.conf settings for the logs and the search you are using to try to find the data.</P> <P>Every Splunk instance has a $SPLUNK_HOME directory. It's the file system location where Splunk is installed. On Windows systems with a UF installed, it's often <CODE>C:\Program Files\SplunkUniversalForwarder</CODE>. $SPLUNK_HOME is Linux notation for a shell variable.</P> Wed, 30 Sep 2020 03:36:06 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475871#M81667 richgalloway 2020-09-30T03:36:06Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475872#M81668 <P>again a lot of thanks for your answer i got it fixed..Actually document was saying to restart the server but actually we need to restart the forwarder only. And when i did it it started working</P> Tue, 07 Jan 2020 12:22:48 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475872#M81668 rajiv_r 2020-01-07T12:22:48Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475873#M81669 <P>Please submit feedback (not a comment) on the documentation so Splunk can clarify what should be restarted.</P> Tue, 07 Jan 2020 13:10:50 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Adding-stanza-in-input-conf-file/m-p/475873#M81669 richgalloway 2020-01-07T13:10:50Z