All Apps and Add-ons

Is there a sample TA inputs.conf for this application running on an MS-Windows host?

lisaac
Path Finder

Is there a sample TA inputs.conf for this application running on an MS-Windows host? Has anyone run this application on a Windows host?

0 Karma

lisaac
Path Finder

Here is what i arrived at based on input from my Remedy team. I listed out the original Nix example along with a suggested MS-Windows example:

[monitor:///opt/remedy_data/user/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\?]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_user

[monitor:///opt/remedy_data/api/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arapi.log]
disabled = false
sourcetype = remedy_api

[monitor:///opt/remedy_data/ar-error/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arerror.log]
disabled = false
sourcetype = remedy_arerror

[monitor:///opt/remedy_data/filter/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arfilter.log]
Do you think this might map to the file CAIFilterPluging.log as well?
disabled = false
sourcetype = remedy_filter

[monitor:///opt/remedy_data/escalation/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_escalation

[monitor:///opt/remedy_data/approval/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\Approval*.log]
disabled = true
sourcetype = remedy_approval

[monitor:///opt/remedy_data/ar-monitor/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\armonitor.log]
disabled = true
sourcetype = remedy_armonitor

[monitor:///opt/remedy_data/arplugin/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\ar*plugin.log]

covers arjavaplugin.log and arftsplugin.log

covers arftsplugin-std*.log & arjavaplugin-std*.log

disabled = true
sourcetype = remedy_arplugin

[monitor:///opt/remedy_data/cmdb/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db*cmdb*.log]

covers arcmdb.log and cmdbengdebug.log

disabled = true
sourcetype = remedy_cmdb

[monitor:///opt/remedy_data/fulltextsearch/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_fulltextsrh

[monitor:///opt/remedy_data/mid-tier/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\armmidtier*.log]
disabled = true
sourcetype = remedy_midtier

[monitor:///opt/remedy_data/servergroup/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_servergroup

[monitor:///opt/remedy_data/sql/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arsql.log]
disabled = true
sourcetype = remedy_sql

[monitor:///opt/remedy_data/thread/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arthread_BMC.log]
disabled = true
sourcetype = remedy_thread

[monitor:///opt/remedy_data/tomcat/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\catalina*.log]
disabled = true
sourcetype = apache_tomcat

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...