IIS logs not recognized

[rgcox1]

After uninstalling Splunk 4.0.10 and doing a clean install of 4.1.4 proxy logs not recognized:

11-10-2010 08:37:26.603 INFO  TailingProcessor - No configurations match, will ignore path='D:\logs\Web\ISALOG_20101005_WEB_000.w3c'.

Inputs.conf:

[monitor://D:\logs\web\*.w3c]
disabled = false
followtail = 1
sourcetype = isa_web
whitelist = \\logs\\*

[monitor://D:\logs\firewall\*.w3c]
disabled = true
followtail = 1
sourcetype = isa_firewall

Whitelist added per http://www.splunk.com/support/forum:SplunkAdministration/4423, but did not help. Actual case of path is D:\LOGS\Web, but changing monitor to match did not help.

[yannK]

The stanza are case sensitive, the "w" of web is different in D:\logs\Web\ISALOG_20101005_WEB_000.w3c and [monitor://D:\logs\web\*.w3c]

to fix, change the stanza to [monitor://D:\logs\Web\*.w3c]