All Apps and Add-ons

Is there a sample TA inputs.conf for this application running on an MS-Windows host?

lisaac
Path Finder

Is there a sample TA inputs.conf for this application running on an MS-Windows host? Has anyone run this application on a Windows host?

0 Karma

lisaac
Path Finder

Here is what i arrived at based on input from my Remedy team. I listed out the original Nix example along with a suggested MS-Windows example:

[monitor:///opt/remedy_data/user/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\?]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_user

[monitor:///opt/remedy_data/api/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arapi.log]
disabled = false
sourcetype = remedy_api

[monitor:///opt/remedy_data/ar-error/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arerror.log]
disabled = false
sourcetype = remedy_arerror

[monitor:///opt/remedy_data/filter/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arfilter.log]
Do you think this might map to the file CAIFilterPluging.log as well?
disabled = false
sourcetype = remedy_filter

[monitor:///opt/remedy_data/escalation/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_escalation

[monitor:///opt/remedy_data/approval/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\Approval*.log]
disabled = true
sourcetype = remedy_approval

[monitor:///opt/remedy_data/ar-monitor/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\armonitor.log]
disabled = true
sourcetype = remedy_armonitor

[monitor:///opt/remedy_data/arplugin/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\ar*plugin.log]

covers arjavaplugin.log and arftsplugin.log

covers arftsplugin-std*.log & arjavaplugin-std*.log

disabled = true
sourcetype = remedy_arplugin

[monitor:///opt/remedy_data/cmdb/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db*cmdb*.log]

covers arcmdb.log and cmdbengdebug.log

disabled = true
sourcetype = remedy_cmdb

[monitor:///opt/remedy_data/fulltextsearch/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_fulltextsrh

[monitor:///opt/remedy_data/mid-tier/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\armmidtier*.log]
disabled = true
sourcetype = remedy_midtier

[monitor:///opt/remedy_data/servergroup/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_servergroup

[monitor:///opt/remedy_data/sql/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arsql.log]
disabled = true
sourcetype = remedy_sql

[monitor:///opt/remedy_data/thread/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arthread_BMC.log]
disabled = true
sourcetype = remedy_thread

[monitor:///opt/remedy_data/tomcat/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\catalina*.log]
disabled = true
sourcetype = apache_tomcat

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...