Monitoring FIles from Diretories

[mathiasy123]

Why my files that read from directories not showing the event?

mathiasy123_0-1593424618982.png

[gcusello · Accepted solution]

Hi @mathiasy123 ,

could you share your inputs.conf?

check if there are other inputs.conf's stanzas that monitor the same folder with a different sourcetype or index because Splunk index files once.

Ciao.

Giuseppe