Getting Data In

Can forwarder be configured to monitor more than one folder on Windows servers?

btran
Explorer

I installed and configured the forwarder on windows. in the monitoring folder, I have multiple folders. can the forwarder monitor more than one folder?
thank you

0 Karma

starcher
SplunkTrust
SplunkTrust

Yes. The references to the inputs.conf configuration file is at http://docs.splunk.com/Documentation/Splunk/6.1.2/admin/inputsconf

In the monitor section:
[monitor://]
* This directs Splunk to watch all files in .
* can be an entire directory or just a single file.
* You must specify the input type and then the path, so put three slashes in your path if you are starting
at the root (to include the slash that goes before the root directory).

martin_mueller
SplunkTrust
SplunkTrust

You can add any number of monitor:// stanzas to inputs.conf, see http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/Monitorfilesanddirectories for more.

mtwitchell
New Member

Thanks but which inputs file? There about 8 of them.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Do open a new question with sufficient details about your issue.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...