Getting Data In

How to monitor Directory in splunk

Thenmozhi
New Member

Hi,

We are trying to monitor directory using splunk.Using Files & Directory data inputs,we are unable to monitor directory.We have only file browser and when we try to click a directory SELCECT option is disabled and only if we click on files SELECT option is getting enabled.Do we have to make any configuration changes to enable directory monitoring???.

Regards,
Thenmozhi

Tags (2)
0 Karma

okrabbe_splunk
Splunk Employee
Splunk Employee

I suspect you are trying to preview the data. Preview only works with one file.

When you want to monitor a whole directory skip the preview:
A File or Directory -> Consume any file on the server -> Skip preview

Then select the radio button - "Continuously index data from a file or directory this Splunk instance can access" and enter the path in the input box.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...