Archive

exclude a file from a directory of log files being indexed

Explorer

I have one file - 101-wallet42A_yyyyMMdd_hhmm.log - which is a binary file in a directory full of log files I'm having forwarded to my indexer.

How can I put in an exclusion so this file will not be accessed by the forwarder?

TIA,

Bill

Tags (2)
0 Karma

Explorer

To exclude this file from being picked up by the forwarder, I think you can use a blacklist (see http://docs.splunk.com/Documentation/Splunk/5.0.1/Data/Whitelistorblacklistspecificincomingdata)

Explorer

Very cool. Exactly what I needed. Thanks dude.

0 Karma