<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Monitor files which have special characters in them? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Monitor-files-which-have-special-characters-in-them/m-p/508923#M86569</link>
    <description>&lt;P&gt;Hello there,&lt;/P&gt;&lt;P&gt;I'm trying to monitor inputs files which have spaces in it which are in the below format but not all of the files are being captured .&amp;nbsp;&lt;/P&gt;&lt;P&gt;Kindly advise me if my inputs need to be corrected in any way.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;E:\files\xxxxx\eeeee\Error_20200528173833_70515016_ssss yyyy&amp;nbsp; Planning Mapping - Update Dimensions.log&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;E:\files\xxxx\eeee\Error_20200615161548_31008196_ Origination Dimension Build.log&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;My current configuration:&lt;/P&gt;&lt;P&gt;[monitor://E:\files\xxxx\eeee\Error_*]&lt;BR /&gt;index = &amp;lt;myindex&amp;gt;&lt;BR /&gt;disabled = false&lt;BR /&gt;sourcetype = &amp;lt;mysourcetype&amp;gt;&lt;BR /&gt;ignoreOlderThan = 30d&lt;BR /&gt;crcSalt = &amp;lt;SOURCE&amp;gt;&lt;/P&gt;</description>
    <pubDate>Mon, 13 Jul 2020 21:25:18 GMT</pubDate>
    <dc:creator>Dingu</dc:creator>
    <dc:date>2020-07-13T21:25:18Z</dc:date>
    <item>
      <title>Monitor files which have special characters in them?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Monitor-files-which-have-special-characters-in-them/m-p/508923#M86569</link>
      <description>&lt;P&gt;Hello there,&lt;/P&gt;&lt;P&gt;I'm trying to monitor inputs files which have spaces in it which are in the below format but not all of the files are being captured .&amp;nbsp;&lt;/P&gt;&lt;P&gt;Kindly advise me if my inputs need to be corrected in any way.&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;E:\files\xxxxx\eeeee\Error_20200528173833_70515016_ssss yyyy&amp;nbsp; Planning Mapping - Update Dimensions.log&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;E:\files\xxxx\eeee\Error_20200615161548_31008196_ Origination Dimension Build.log&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;My current configuration:&lt;/P&gt;&lt;P&gt;[monitor://E:\files\xxxx\eeee\Error_*]&lt;BR /&gt;index = &amp;lt;myindex&amp;gt;&lt;BR /&gt;disabled = false&lt;BR /&gt;sourcetype = &amp;lt;mysourcetype&amp;gt;&lt;BR /&gt;ignoreOlderThan = 30d&lt;BR /&gt;crcSalt = &amp;lt;SOURCE&amp;gt;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Jul 2020 21:25:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Monitor-files-which-have-special-characters-in-them/m-p/508923#M86569</guid>
      <dc:creator>Dingu</dc:creator>
      <dc:date>2020-07-13T21:25:18Z</dc:date>
    </item>
    <item>
      <title>Re: Monitor files which have special characters in them?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Monitor-files-which-have-special-characters-in-them/m-p/508926#M86570</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/222649"&gt;@Dingu&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If you have spaces in the log file name, you should monitor the base directory to monitor the log files&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;[monitor://E:\files\xxxx\eeee]
index = &amp;lt;myindex&amp;gt;
disabled = false
sourcetype = &amp;lt;mysourcetype&amp;gt;
ignoreOlderThan = 30d
crcSalt = &amp;lt;SOURCE&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hope this helps&lt;/P&gt;</description>
      <pubDate>Mon, 13 Jul 2020 22:01:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Monitor-files-which-have-special-characters-in-them/m-p/508926#M86570</guid>
      <dc:creator>anilchaithu</dc:creator>
      <dc:date>2020-07-13T22:01:24Z</dc:date>
    </item>
  </channel>
</rss>

