Deployment Architecture

What does this WatchedFile error mean when monitoring a folder? While detecting legacy content headers, fileHalfMd5 returned an error

hurricane13
Engager

ERROR WatchedFile - While detecting legacy content headers, fileHalfMd5 returned an error (path="\REMOTEHOST\dhcp\DhcpSrvLog-Sun.log", reason="The operation completed successfully.").

I can't find one thing on google about this. I have read/write access to the remote host and have logged in to verify that everything should work as expected.

My inputs.conf is straight forward and works on many other UF.

[monitor://\REMOTEHOST\dhcp\DhcpSrv*.log]
index=dhcp-blah
sourcetype = DhcpSrvLog
disabled = 0

Thanks!

Labels (1)
Tags (2)
0 Karma

gerico84
New Member

I've same problem, does anyone have any suggestions?

0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...