All Apps and Add-ons

Importing logfiles from the local file system?

dylanw
New Member

Hello,
I'm Running Splunk with Modsecurity on a box running Apache and Modsecurity.

Do I have to use a forwarder? Or can I use "Data input" or some other setting
To import the data into the module. Directly from the filesystem?

It just seems a bit weird to send it someplace else and then back again! Tell me it's not so.

Cheers,
Dylan

Tags (2)
0 Karma

sowings
Splunk Employee
Splunk Employee

Yes, absolutely, you can index from the local system. Look at the monitor: keyword in inputs.conf.

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros?Join  Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...