topic Re: how to send the local file using splunk forwarder docker image? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/how-to-send-the-local-file-using-splunk-forwarder-docker-image/m-p/490978#M83910 <P>run <CODE>docker exec</CODE> and then use the <A href="https://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorfilesanddirectoriesusingtheCLI">Splunk CLI</A> to add the inputs</P> <PRE><CODE>/opt/splunk/bin/splunk add monitor /var/log/logfile.txt -index newindex </CODE></PRE> Thu, 12 Mar 2020 02:01:41 GMT xavierashe 2020-03-12T02:01:41Z how to send the local file using splunk forwarder docker image? https://community.splunk.com/t5/Getting-Data-In/how-to-send-the-local-file-using-splunk-forwarder-docker-image/m-p/490977#M83909 <P><CODE><BR /> splunkuniversalforwarder:<BR /> image: splunk/universalforwarder<BR /> environment:<BR /> - SPLUNK_START_ARGS=--accept-license<BR /> - SPLUNK_FORWARD_SERVER=ops-splunkhead02.dop.sfdc.net:9997<BR /> - SPLUNK_USER=root<BR /> - SPLUNK_PASSWORD=xxxx<BR /> ports:<BR /> - 9997:9997<BR /> </CODE></P> <P>I store the log flie in <CODE>/var/logs/serviceLog.log</CODE> (Not in the container but in the local machine)</P> <P>I don't see the parameter to pass the file path;;; Seems like the splunk forwarder is running in the background and I just realized I never pass the log source variable to the container!</P> <P>Does anyone perhaps have an idea?</P> Thu, 12 Mar 2020 00:06:50 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-send-the-local-file-using-splunk-forwarder-docker-image/m-p/490977#M83909 johnbaekkkk 2020-03-12T00:06:50Z Re: how to send the local file using splunk forwarder docker image? https://community.splunk.com/t5/Getting-Data-In/how-to-send-the-local-file-using-splunk-forwarder-docker-image/m-p/490978#M83910 <P>run <CODE>docker exec</CODE> and then use the <A href="https://docs.splunk.com/Documentation/Splunk/latest/Data/MonitorfilesanddirectoriesusingtheCLI">Splunk CLI</A> to add the inputs</P> <PRE><CODE>/opt/splunk/bin/splunk add monitor /var/log/logfile.txt -index newindex </CODE></PRE> Thu, 12 Mar 2020 02:01:41 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-send-the-local-file-using-splunk-forwarder-docker-image/m-p/490978#M83910 xavierashe 2020-03-12T02:01:41Z