Getting Data In

Monitoring unique log files

user789
New Member

What is the best way to monitor log files that are unique to a host?
For example, if hosta has log.x, and hostb has log.y, and so on, what would be the best way to define/import these logs from each individual host if they are unique to only one system within an environment?

0 Karma

afx
Contributor

I assume you want one deployed app for all the hosts.
Can you define the file names via a regex?

https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/Specifyinputpathswithwildcards

cheers
afx

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Perhaps [monitor:///log.*]?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...