Getting Data In

Can forwarder be configured to monitor more than one folder on Windows servers?

btran
Explorer

I installed and configured the forwarder on windows. in the monitoring folder, I have multiple folders. can the forwarder monitor more than one folder?
thank you

0 Karma

starcher
Influencer

Yes. The references to the inputs.conf configuration file is at http://docs.splunk.com/Documentation/Splunk/6.1.2/admin/inputsconf

In the monitor section:
[monitor://]
* This directs Splunk to watch all files in .
* can be an entire directory or just a single file.
* You must specify the input type and then the path, so put three slashes in your path if you are starting
at the root (to include the slash that goes before the root directory).

martin_mueller
SplunkTrust
SplunkTrust

You can add any number of monitor:// stanzas to inputs.conf, see http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/Monitorfilesanddirectories for more.

mtwitchell
New Member

Thanks but which inputs file? There about 8 of them.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Do open a new question with sufficient details about your issue.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...