Getting Data In

How to edit my wildcard syntax to monitor logs from a file path that contains the current date?

marellasunil
Communicator

I am trying to extract a log file using below configuration in inputs.conf

C:/logs/28062016/*.log

28062016 is the current date.

I have been trying the below paths, non of these are working.

C:/logs/*/*.log
C:/logs/.../*.log

Can anyone help me?

0 Karma
1 Solution

ddrillic
Ultra Champion

C:/logs/.../*.log should work ... or maybe C:\logs\...\*.log

The following speaks about it - Specify input paths with wildcards

It says -

-- The ellipsis wildcard recurses through directories and any number of levels of subdirectories to find matches.
If you specify a folder separator ...

/foo/.../bar.log matches the files /foo/1/bar.log, /foo/2/bar.log...

View solution in original post

ddrillic
Ultra Champion

C:/logs/.../*.log should work ... or maybe C:\logs\...\*.log

The following speaks about it - Specify input paths with wildcards

It says -

-- The ellipsis wildcard recurses through directories and any number of levels of subdirectories to find matches.
If you specify a folder separator ...

/foo/.../bar.log matches the files /foo/1/bar.log, /foo/2/bar.log...

Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...