Getting Data In

How to configure inputs.conf file?

karthi2809
Builder

I have log file name as

va10p30093_03262018_access.log
va10p30093_03242018_error_log

My inputs.conf configuration :
[default]
host = va10p40093
[monitor:////ws/ihs85/va10p30093-http-server85]
crcSalt =
whitelist = http_plugin.log|va10p40093__access.log|*error_log
blacklist=.[0-9]$
index =test_prod

But logs are not forwarding.Please help on this

0 Karma
1 Solution

mayurr98
Super Champion

Try this on forwarder.

[monitor:///ws/ihs85/va10p30093-http-server85]
index =test_prod
whitelist = http_plugin\.log$|va10p40093_.*_access\.log$|error_log$

let me know if this helps!

View solution in original post

mayurr98
Super Champion

Try this on forwarder.

[monitor:///ws/ihs85/va10p30093-http-server85]
index =test_prod
whitelist = http_plugin\.log$|va10p40093_.*_access\.log$|error_log$

let me know if this helps!

karthi2809
Builder

for this log .there is no extension as .log :

va10p30093_03242018_error_log

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...