All Apps and Add-ons

Is there a sample TA inputs.conf for this application running on an MS-Windows host?

lisaac
Path Finder

Is there a sample TA inputs.conf for this application running on an MS-Windows host? Has anyone run this application on a Windows host?

0 Karma

lisaac
Path Finder

Here is what i arrived at based on input from my Remedy team. I listed out the original Nix example along with a suggested MS-Windows example:

[monitor:///opt/remedy_data/user/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\?]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_user

[monitor:///opt/remedy_data/api/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arapi.log]
disabled = false
sourcetype = remedy_api

[monitor:///opt/remedy_data/ar-error/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arerror.log]
disabled = false
sourcetype = remedy_arerror

[monitor:///opt/remedy_data/filter/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arfilter.log]
Do you think this might map to the file CAIFilterPluging.log as well?
disabled = false
sourcetype = remedy_filter

[monitor:///opt/remedy_data/escalation/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = false
sourcetype = remedy_escalation

[monitor:///opt/remedy_data/approval/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\Approval*.log]
disabled = true
sourcetype = remedy_approval

[monitor:///opt/remedy_data/ar-monitor/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\armonitor.log]
disabled = true
sourcetype = remedy_armonitor

[monitor:///opt/remedy_data/arplugin/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\ar*plugin.log]

covers arjavaplugin.log and arftsplugin.log

covers arftsplugin-std*.log & arjavaplugin-std*.log

disabled = true
sourcetype = remedy_arplugin

[monitor:///opt/remedy_data/cmdb/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db*cmdb*.log]

covers arcmdb.log and cmdbengdebug.log

disabled = true
sourcetype = remedy_cmdb

[monitor:///opt/remedy_data/fulltextsearch/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_fulltextsrh

[monitor:///opt/remedy_data/mid-tier/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\armmidtier*.log]
disabled = true
sourcetype = remedy_midtier

[monitor:///opt/remedy_data/servergroup/]
“I don’t know what files this might map too? Any thoughts on this one?”
disabled = true
sourcetype = remedy_servergroup

[monitor:///opt/remedy_data/sql/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arsql.log]
disabled = true
sourcetype = remedy_sql

[monitor:///opt/remedy_data/thread/]
[monitor:/// E:\Program Files\BMC Software\ARSystem\Arserver\Db\arthread_BMC.log]
disabled = true
sourcetype = remedy_thread

[monitor:///opt/remedy_data/tomcat/]
[monitor:/// mware\vfabric-tc-server-standard-2.6.5.RELEASE\BMC_MT_64Bit_V7\logs\catalina*.log]
disabled = true
sourcetype = apache_tomcat

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...