Monitoring deploymentclient.conf in etc\system

[krishnab]

Is it possible to monitor the folder in etc/system which consists the deployment client ip thru windows app/add-on.

I tried this but not working.

[monitor://C:\Program Files\SplunkUniversalForwarder\etc\system\local\deploymentclient.conf]
disabled = 0
interval = 60
sourcetype = DSIP
index = perfmon

[jajung]

Hi krishnab,

Could you please share with us what you're trying to do with the deployment server's IP? There are a number of ways to achieve this without having to monitor the file for ingestion!