Getting Data In

How to monitor assembly folder in windows ?

chimbudp
Contributor

1.Need to monitor the assembly dll Version, date created, date modified in the GAC folder
2.I have installed Universal forwarder in the Host machine.
3.How can set my inputs.conf to get all those values to my indexer?

-Please help

0 Karma
1 Solution

Ayn
Legend

Have a look at the fschange functionality: http://docs.splunk.com/Documentation/Splunk/5.0.2/Data/Monitorchangestoyourfilesystem

Like the docs page says though, sadly this feature is deprecated - it still exists, but it's not going to be developed and may eventually be dropped altogether from what I understand.

Otherwise, your best bet would be to use a scripted input that gathers the directory listings in a way you want and then sends them off to Splunk.

View solution in original post

Ayn
Legend

Have a look at the fschange functionality: http://docs.splunk.com/Documentation/Splunk/5.0.2/Data/Monitorchangestoyourfilesystem

Like the docs page says though, sadly this feature is deprecated - it still exists, but it's not going to be developed and may eventually be dropped altogether from what I understand.

Otherwise, your best bet would be to use a scripted input that gathers the directory listings in a way you want and then sends them off to Splunk.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...