Getting Data In

How to monitor Directory in splunk

New Member


We are trying to monitor directory using splunk.Using Files & Directory data inputs,we are unable to monitor directory.We have only file browser and when we try to click a directory SELCECT option is disabled and only if we click on files SELECT option is getting enabled.Do we have to make any configuration changes to enable directory monitoring???.


Tags (2)
0 Karma

Splunk Employee
Splunk Employee

I suspect you are trying to preview the data. Preview only works with one file.

When you want to monitor a whole directory skip the preview:
A File or Directory -> Consume any file on the server -> Skip preview

Then select the radio button - "Continuously index data from a file or directory this Splunk instance can access" and enter the path in the input box.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!