https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497898#M84907 <P>If it is being defined inside the App, verified by running Rich's command above, check the app-dir/default/inputs.conf as well as the app-dir/local/inputs.conf. Besides, this is not an error as splunk ignores the wrong parameter.</P> Sat, 05 Oct 2019 09:53:12 GMT ololdach 2019-10-05T09:53:12Z https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497895#M84904 <P>When we are trying to take Exchange logs using the below inputs.conf its getting an error, Any body help me on this</P> <P>10-03-2019 15:44:09.088 +0400 ERROR TailingProcessor - Invalid value '0' for parameter 'time_before_close' in stanza 'monitor://C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking'. Will use default value (3).</P> <P>[monitor://C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking]<BR /> disabled=false<BR /> index=EXCH<BR /> sourcetype=MSExch2013:Tracking</P> Wed, 30 Sep 2020 02:28:39 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497895#M84904 abdulshemeer166 2020-09-30T02:28:39Z https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497896#M84905 <P>The setting must be coming from a different config file. What do you get when you run</P> <PRE><CODE>splunk btool --debug inputs list "monitor://C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking" </CODE></PRE> Thu, 03 Oct 2019 23:52:30 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497896#M84905 richgalloway 2019-10-03T23:52:30Z https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497897#M84906 <P>its loading from Exchange App and I can not see any other monitor entries for the same path</P> Fri, 04 Oct 2019 12:25:53 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497897#M84906 abdulshemeer166 2019-10-04T12:25:53Z https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497898#M84907 <P>If it is being defined inside the App, verified by running Rich's command above, check the app-dir/default/inputs.conf as well as the app-dir/local/inputs.conf. Besides, this is not an error as splunk ignores the wrong parameter.</P> Sat, 05 Oct 2019 09:53:12 GMT https://community.splunk.com/t5/Getting-Data-In/ERROR-TailingProcessor-Invalid-value-0-for-parameter-time-before/m-p/497898#M84907 ololdach 2019-10-05T09:53:12Z