Input source path case sensitive?

[eugenekogan]

Is the path specified in a monitor stanza in inputs.conf case sensitive?

For example, [monitor://C:\Windows\System32\dhcp] does not seem to work on servers that use the path of C:\WINDOWS\system32\dhcp. It's the same path except for capitalization of directory names.

If this is correct, is there a way to make it not case sensitive?

Thanks!

[jacobappleton]

While I haven't been able to find anything in the documentation, in my experience, yes, Windows paths are case-sensitive.

[tgow]

If you are having problems then I would suggest that you take advantage of wildcarding for directories which is available. Here is an example:

[monitor::C:\...dhcp]

or

[monitor::...System32\dhcp]

Here is a link to more information:

http://docs.splunk.com/Documentation/Splunk/4.3/Data/Specifyinputpathswithwildcards

[gbronner_rbc]

The original poster asked a reasonable question, which is that while files are case-sensitive on Unix, the convention is that they are not on Windows. Hence, this behaviour, if confirmed, would be uncommon, and deserves to be highlighted.