topic Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error. in Getting Data In

Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

druvakumar — Mon, 08 Jun 2020 21:24:31 GMT

I tried two ways
1). C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor -source C:\Program Files\Atlassian\Application Data\JIRA\log
Parameters must be in the form '-parameter value'

2). C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor -source C:\Program Files\Atlassian\Application Data\JIRA\log\atlassian-jira.log
Parameters must be in the form '-parameter value'

I'm getting I'm getting Parameters must be in the form '-parameter value' error. Can someone help me here?

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

richgalloway — Tue, 03 Apr 2018 13:00:55 GMT

Splunk is probably not liking the space in the source file name. Try putting double quotes around the name or use the 8.3 form of file name (C:\Progra~1\...).

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

p_gurav — Tue, 03 Apr 2018 13:02:49 GMT

Can you try:

C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor C:\Program Files\Atlassian\Application Data\JIRA\log

Also try using tab for auto selecting source name including space.

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

druvakumar — Tue, 03 Apr 2018 13:13:32 GMT

I tried "C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor C:\Program Files\Atlassian\Application Data\JIRA\log" this aswell, it didn't work
is there any other param which we need to include?

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

p_gurav — Tue, 03 Apr 2018 13:16:17 GMT

Can you try putting source in double quotes:

C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor "C:\Program Files\Atlassian\Application Data\JIRA\log"

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

druvakumar — Thu, 05 Apr 2018 07:15:05 GMT

Thank you! it worked 🙂

Re: Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

vishwanthini — Sun, 05 Apr 2020 23:33:25 GMT

By using double quotes around the path worked for me. Until i put it in double quotes, i kept getting the "Parameters must be in the form '-parameter value'" error

Here is the command i used
C:\Program Files\SplunkUniversalForwarder\bin>splunk install app "C:\Program Files\Splunk\splunkclouduf.spl" -auth admin:changeme