Monitor windows file using environment variable in the path

[bharathkumarnec]

Hi All,

Can we specify environment variables of windows in the monitor stanza. For example like below:

[monitor://%systemdrive%\windows\Temp\logs.txt]

We have logs.txt in Temp directory and we have different system drives, one server is with C:\ & the other server is with E:.

Can we monitor like above ??

[twinspop]

List both styles? Splunk will ignore inputs that have paths that don't exist.

[monitor://C:\windows\Temp\logs.txt]
foo = bar

[monitor://E:\windows\Temp\logs.txt]
foo = bar

[bharathkumarnec]

Yeah True! But just wanted to check if that way is possible in the Monitor stanza. Just to reduce number of stanzas in inputs.conf file.