topic Re: How do we read logs under the daily format directory? in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319078#M5513 <P>Wildcards are allowed in file paths. Try</P> <PRE><CODE>[monitor://E:\Ora\DRM\*\log.txt] </CODE></PRE> Mon, 04 Dec 2017 18:47:04 GMT richgalloway 2017-12-04T18:47:04Z How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319077#M5512 <P>I have logs under the daily date format directory </P> <P>How I ready the logs?</P> <P>Directory : E:\Ora\DRM\daillyDate\log.txt</P> Mon, 04 Dec 2017 16:49:00 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319077#M5512 thirulog 2017-12-04T16:49:00Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319078#M5513 <P>Wildcards are allowed in file paths. Try</P> <PRE><CODE>[monitor://E:\Ora\DRM\*\log.txt] </CODE></PRE> Mon, 04 Dec 2017 18:47:04 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319078#M5513 richgalloway 2017-12-04T18:47:04Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319079#M5514 <P>Monitor the directory <CODE>E:\Ora\DRM</CODE> and it will index everything below that. </P> <P>(NOTE: You <EM>can</EM> use wildcards, but that doesn't mean you <EM>should</EM> use wildcards. )</P> Mon, 04 Dec 2017 18:48:55 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319079#M5514 lycollicott 2017-12-04T18:48:55Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319080#M5515 <P>Options are plenteous, there is also this:</P> <PRE><CODE>[monitor://E:\Ora\DRM\...\log.txt] </CODE></PRE> Tue, 05 Dec 2017 01:49:01 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319080#M5515 woodcock 2017-12-05T01:49:01Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319081#M5516 <P>perhaps missing a path segment there?</P> Tue, 05 Dec 2017 01:49:26 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319081#M5516 woodcock 2017-12-05T01:49:26Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319082#M5517 <P>I have [monitor://E:\Ora\DRM**.txt] but did not work</P> <P>Daily date directory created for every day and there are 20 logs under the date directory</P> Tue, 05 Dec 2017 03:06:49 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319082#M5517 thirulog 2017-12-05T03:06:49Z Re: How do we read logs under the daily format directory? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319083#M5518 <P>I think that he meant this:</P> <PRE><CODE>[monitor://E:\Ora\DRM\*\*\log.txt] </CODE></PRE> Tue, 05 Dec 2017 03:14:01 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-read-logs-under-the-daily-format-directory/m-p/319083#M5518 woodcock 2017-12-05T03:14:01Z