Hi! I'm using Splunk Free, specifically the monitor feature from a directory. I put several files in it, but not all appears on the data summary box dialog. Is there any restriction with this feature when using Free Splunk?
Thanks in adavance!
There's no restriction on monitoring files. To be sure what's actually indexed, run this over all time:
| tstats count where index=* by index host sourcetype source