Follow on question to https://community.splunk.com/t5/Getting-Data-In/Can-batch-read-a-partial-file-such-that-the-of-event...
[Q] For inputs.conf, can the time_before_close setting be used with [batch]?
The inputs.conf file specifically indicates which [monitor] settings are compatible with [batch] and this setting is not included.
https://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf
From inputs.conf
The following settings work identically as for [monitor::] stanzas,
documented above
host_regex = <regular expression>
host_segment = <integer>
crcSalt = <string>
recursive = <boolean>
whitelist = <regular expression>
blacklist = <regular expression>
initCrcLength = <integer>
