https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187599#M54039 <P>Sorry to say this, it was my typo error I gave the same thing that you have mentioned i.e. [monitor://E:\Splunk]<BR /> disabled=false<BR /> recursive=true</P> <P>But why is it not viewing my other log files? Is there any UNC restriction in SPLUNK? When it can read a file by SystemOut_14.2.2011_1 in one of the sub directory, why is it not viewing the other 9 log files whose name just differs by last digitSystemOut_14.2.2011_2 etc...</P> Mon, 28 Sep 2020 16:08:58 GMT sushma7 2020-09-28T16:08:58Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187595#M54035 <P>Hi,</P> <P>I have a directory on E drive by name SPLUNK. It has 3 to 4 subdirectories in it and under each subdirectory there almost 10 files with names as SystemOut_14.2.2011_1, SystemOut_14.2.2011_2 etc..<BR /> But in my SPLUNK only monitors the first file in each of the subdirectory, not the rest, why is it happening so?</P> <P>Appreciate your help!</P> <P>Regards,<BR /> Sushma.</P> Mon, 28 Sep 2020 16:08:01 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187595#M54035 sushma7 2020-09-28T16:08:01Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187596#M54036 <P>Under inputs.conf file i just enetered [monitor:///E:\Splunk]<BR /> disabled =false<BR /> recursive = true</P> <P>Is thereanything more I need to enter?</P> Fri, 14 Mar 2014 06:13:47 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187596#M54036 sushma7 2014-03-14T06:13:47Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187597#M54037 <P>Need help!</P> Sat, 15 Mar 2014 04:47:07 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187597#M54037 sushma7 2014-03-15T04:47:07Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187598#M54038 <P>Hi sushma7,</P> <P>You monitor path is wrong, use this instead</P> <PRE><CODE>[monitor://E:\Splunk] </CODE></PRE> <P>Also read the docs on <A href="http://docs.splunk.com/Documentation/Splunk/6.0.2/Data/Monitorfilesanddirectories">how to monitor files and directories</A> and about <CODE>monitorNoHandle</CODE> is special.</P> <P>Cheers, MuS</P> Sat, 15 Mar 2014 06:29:36 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187598#M54038 MuS 2014-03-15T06:29:36Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187599#M54039 <P>Sorry to say this, it was my typo error I gave the same thing that you have mentioned i.e. [monitor://E:\Splunk]<BR /> disabled=false<BR /> recursive=true</P> <P>But why is it not viewing my other log files? Is there any UNC restriction in SPLUNK? When it can read a file by SystemOut_14.2.2011_1 in one of the sub directory, why is it not viewing the other 9 log files whose name just differs by last digitSystemOut_14.2.2011_2 etc...</P> Mon, 28 Sep 2020 16:08:58 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187599#M54039 sushma7 2020-09-28T16:08:58Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187600#M54040 <P>Any suggestions please?</P> Sun, 16 Mar 2014 15:11:38 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187600#M54040 sushma7 2014-03-16T15:11:38Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187601#M54041 <P>whats the extension of the files? why don't you put the names explicitly?</P> <P><CODE>[monitor://E:\Splunk\...\*.log]</CODE></P> Sun, 16 Mar 2014 18:36:17 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187601#M54041 linu1988 2014-03-16T18:36:17Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187602#M54042 <P>permission troubles perhaps? check splunkd.log for any messages related to this directory and/or those files</P> Mon, 17 Mar 2014 06:29:14 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187602#M54042 MuS 2014-03-17T06:29:14Z https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187603#M54043 <P>I had this problem n fix it .<BR /> looks like you already doing it right but my mistake was type ..\ , should ...\ (3 dots)<BR /> [monitor://C:\inetpub\logs\LogFiles...*.log]</P> Fri, 17 Aug 2018 19:35:45 GMT https://community.splunk.com/t5/Splunk-Search/Monitoring-the-directories-recursively/m-p/187603#M54043 chandanghoshCTL 2018-08-17T19:35:45Z