Getting Data In

Can forwarder be configured to monitor more than one folder on Windows servers?


I installed and configured the forwarder on windows. in the monitoring folder, I have multiple folders. can the forwarder monitor more than one folder?
thank you

0 Karma


Yes. The references to the inputs.conf configuration file is at

In the monitor section:
* This directs Splunk to watch all files in .
* can be an entire directory or just a single file.
* You must specify the input type and then the path, so put three slashes in your path if you are starting
at the root (to include the slash that goes before the root directory).


You can add any number of monitor:// stanzas to inputs.conf, see for more.

New Member

Thanks but which inputs file? There about 8 of them.

0 Karma


Do open a new question with sufficient details about your issue.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...