Monitoring unique log files

user789 · ‎05-20-2020

What is the best way to monitor log files that are unique to a host?
For example, if hosta has log.x, and hostb has log.y, and so on, what would be the best way to define/import these logs from each individual host if they are unique to only one system within an environment?

afx · ‎05-20-2020

I assume you want one deployed app for all the hosts.
Can you define the file names via a regex?

https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/Specifyinputpathswithwildcards

cheers
afx

richgalloway · ‎05-20-2020

Perhaps [monitor:///log.*]?

---
If this reply helps you, Karma would be appreciated.

Monitoring unique log files

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Join the Conversation

Monitoring unique log files

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk