I,am having problem with the configuration inputs.conf file, I'm monitoring remote computer with universal forwarder.
Remote host (monitoring):
Log: ERROR TailingProcessor - File will not be read, seekptr checksum did not match (file=E:\SQL\Audit\Log\Audit0010.log). Last time we saw this initcrc, filename was different. You may wish to use a CRC salt on this source. Consult the documentation or file a support case online at http://www.splunk.com/page/submit_issue for more info.
The splunk server, Inputs.conf:
crcSalt = <//E:\SQL\Audit\Log]E:\SQL\Audit\Log>
I try, but its not works