Getting Data In

Monitor remote directory

Sheela
Path Finder

I want to monitor a directory that resides on another machine which has a Splunk forwarder on it. There is one specific directory which needs to be monitored and I cannot find the proper documentation which points me towards it. Can someone please tell me how to do this via the GUI and the config files?

Tags (1)
0 Karma
1 Solution

bbingham
Builder

The easiest way, simply add your directory you'd like to monitor on your forwarder through the gui prior to enabling it as a forwarder.

If you've already done set the machine as a forwarder, simply follow the cli instructions for adding an input. Below is the link to the page in the documentation you're looking for:

Configure your inputs

View solution in original post

0 Karma

bbingham
Builder

The easiest way, simply add your directory you'd like to monitor on your forwarder through the gui prior to enabling it as a forwarder.

If you've already done set the machine as a forwarder, simply follow the cli instructions for adding an input. Below is the link to the page in the documentation you're looking for:

Configure your inputs

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...