topic how to force splunk to monitor a directory. in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/how-to-force-splunk-to-monitor-a-directory/m-p/49487#M7000 <P>How do I force splunk to index new files in the directory that is being monitored immediately? sometimes it takes really long for it to detect/index new files. I have just one folder that splunk is monitoring... and it still doesn't pick up my file. I have to bounce the forwarder everytime, to make splunk pick up my new files. Is there a setting somewhere, that i can change, to make splunk monitor my dir more often that is... Or is there a CLI command that I can issue to force splunk to monitor that dir ?</P> <P>Splunk Indexer: 4.1.4-82143 Splunk Forwarder:4.0.10-77919</P> <P>Thanks!</P> Tue, 14 Sep 2010 04:50:03 GMT sfmandmdev 2010-09-14T04:50:03Z how to force splunk to monitor a directory. https://community.splunk.com/t5/Monitoring-Splunk/how-to-force-splunk-to-monitor-a-directory/m-p/49487#M7000 <P>How do I force splunk to index new files in the directory that is being monitored immediately? sometimes it takes really long for it to detect/index new files. I have just one folder that splunk is monitoring... and it still doesn't pick up my file. I have to bounce the forwarder everytime, to make splunk pick up my new files. Is there a setting somewhere, that i can change, to make splunk monitor my dir more often that is... Or is there a CLI command that I can issue to force splunk to monitor that dir ?</P> <P>Splunk Indexer: 4.1.4-82143 Splunk Forwarder:4.0.10-77919</P> <P>Thanks!</P> Tue, 14 Sep 2010 04:50:03 GMT https://community.splunk.com/t5/Monitoring-Splunk/how-to-force-splunk-to-monitor-a-directory/m-p/49487#M7000 sfmandmdev 2010-09-14T04:50:03Z Re: how to force splunk to monitor a directory. https://community.splunk.com/t5/Monitoring-Splunk/how-to-force-splunk-to-monitor-a-directory/m-p/49488#M7001 <P>I'd recommend that you switch the forwarder over to 4.1.x. There isn't much you can do about the file monitor in 4.0, but it was re-implemented for 4.1 and now offers much better and more responsive performance.</P> Tue, 14 Sep 2010 05:20:24 GMT https://community.splunk.com/t5/Monitoring-Splunk/how-to-force-splunk-to-monitor-a-directory/m-p/49488#M7001 gkanapathy 2010-09-14T05:20:24Z