Monitor Text Files

[michaelsplunk1]

If we have logs being pushed to a text file stored on our drive, can Splunk monitor the content of these files and can we search the content of these files?

[gcusello]

Hi @michaelsplunk1,

yes, Splunk can index all text files.

If you create an input to read all files in a folder and you copy your files in that folder, Splunk automatically reads those files.

Obviously if you have different files (e.g forma or content), that must be parsed using different sourcetypes, you have to create a different input for each kind of file.

Ciao.

Giuseppe