How can one implement the deprecated FSChange feature in Splunk version 5.0 onward. It says that the feature will be removed from future versions.
This has been covered in a couple of threads, one more about the feature and another about options.
http://splunk-base.splunk.com/answers/67574/fschange-deprecated-what-options-are-available http://splunk-base.splunk.com/answers/63874/why-is-fschange-a-deprecated-feature-in-splunk-50
