Getting Data In

Can forwarder be configured to monitor more than one folder on Windows servers?

Explorer

I installed and configured the forwarder on windows. in the monitoring folder, I have multiple folders. can the forwarder monitor more than one folder?
thank you

0 Karma

SplunkTrust
SplunkTrust

Yes. The references to the inputs.conf configuration file is at http://docs.splunk.com/Documentation/Splunk/6.1.2/admin/inputsconf

In the monitor section:
[monitor://]
* This directs Splunk to watch all files in .
* can be an entire directory or just a single file.
* You must specify the input type and then the path, so put three slashes in your path if you are starting
at the root (to include the slash that goes before the root directory).

SplunkTrust
SplunkTrust

You can add any number of monitor:// stanzas to inputs.conf, see http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/Monitorfilesanddirectories for more.

New Member

Thanks but which inputs file? There about 8 of them.

0 Karma

SplunkTrust
SplunkTrust

Do open a new question with sufficient details about your issue.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!