Getting Data In

How to configure inputs.conf file?

Communicator

I have log file name as

va10p3009303262018access.log
va10p3009303242018error_log

My inputs.conf configuration :
[default]
host = va10p40093
[monitor:////ws/ihs85/va10p30093-http-server85]
crcSalt =
whitelist = httpplugin.log|va10p40093_access.log|errorlog*
blacklist=.[0-9]$
index =test
prod

But logs are not forwarding.Please help on this

0 Karma
1 Solution

SplunkTrust
SplunkTrust

Try this on forwarder.

[monitor:///ws/ihs85/va10p30093-http-server85]
index =test_prod
whitelist = http_plugin\.log$|va10p40093_.*_access\.log$|error_log$

let me know if this helps!

View solution in original post

SplunkTrust
SplunkTrust

Try this on forwarder.

[monitor:///ws/ihs85/va10p30093-http-server85]
index =test_prod
whitelist = http_plugin\.log$|va10p40093_.*_access\.log$|error_log$

let me know if this helps!

View solution in original post

Communicator

for this log .there is no extension as .log :

va10p3009303242018error_log

0 Karma