How do I linux directory

[nhsplunk]

I went through Manager -> Data Inputs -> Files & Directories and chose "Monitor a file or directory" option. I entered the full Linux server path, but where do I specify credentials for linux server login?

[skippylou]

Taking a guess here, but wondering if you think that setting up the file/directory monitoring there pertains to machines other than where splunk is currently installed on. That Data Input screen for Files & Directories is referencing the actual host that splunk is running on - and as ftk mentions the files/directories you want to monitor need to be accessible by the account splunk is running as.

However, I think you are talking about monitoring files and directories on remote machines to get indexed into splunk. If so, you'll want to look at 'Forwarding and Receiving' as the best option.

http://www.splunk.com/base/Documentation/latest/Admin/Aboutforwardingandreceiving

Hope that helps,

scott

[ftk]

Splunk will use the credentials its process runs under to access any configured monitors.