I need to monitor file changes in Splunk. I have a file that is updated constantly, and I need to know when there's a update. And if is possible, where it changed.
There is an app for that called File/Directory Information Input. That app monitors the meta-data of the file-system and tells you when files and directories changed. It doesn't currently report on that changes within the file, just that the file changed.
There is an app for that called File/Directory Information Input. That app monitors the meta-data of the file-system and tells you when files and directories changed. It doesn't currently report on that changes within the file, just that the file changed.
