Getting Data In

How to write a monitor stanza in inputs.conf to add a path for *.xml files?

brod_geico
Path Finder

i need to add the path below to my inputs.conf file and it has a lot of .xml files
`/ibuapps/sales/2014-11-11/
/*.xml`

but what is the right stanza to add it to my monitor list?

0 Karma
1 Solution

cpetterborg
SplunkTrust
SplunkTrust

You have an extra slash in your path that looks strange (copy-pasted, too), but...

[monitor:///ibuapps/sales/2014-11-11/*.xml]
sourcetype = WHATEVER
KV_MODE = xml
...

should work.

View solution in original post

cpetterborg
SplunkTrust
SplunkTrust

You have an extra slash in your path that looks strange (copy-pasted, too), but...

[monitor:///ibuapps/sales/2014-11-11/*.xml]
sourcetype = WHATEVER
KV_MODE = xml
...

should work.

brod_geico
Path Finder

thanks but i have multiple files with same format like 2014-11-23 ----2013-10-12 etc * is not working

0 Karma

cpetterborg
SplunkTrust
SplunkTrust

So have you tried:
[monitor:///ibuapps/sales/*/*.xml]

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...