How do you configure Splunk to monitor files within a VM? I installed Splunk within a VM and added a data input to monitor the file changes to a series of files. When I view the data input on the Files and Directories page it does show that it is monitoring a number of files but nothing is ever indexed. Is there a different procedure to monitor files that are within a VM?
So when you go into Search, Status, Inputs...you see data. But when you go into Search, Status, Index Activity...you don't see anything?
I created a File/Directory input as well. Do you have a whitelist or blacklist configured?