I want to monitor windows event logs and the below is the entries of inputs.conf file. But i am not able to view the data for this index. Can someone confirm if the format of entries is correct?
inputs.conf
[default]
host = myhost
[WinEventLog:Application]
disabled = 0
index = myindex
sourcetype = WinEventLog:Application
SourceName=myapplicationname
Looks right, except the last line - not sure what the idea is there. That shouldn't stop the input from working though. Judging by the conf, your error does not lie there but elsewhere.
Looks right, except the last line - not sure what the idea is there. That shouldn't stop the input from working though. Judging by the conf, your error does not lie there but elsewhere.