Moving /var/opt/splunk directory, does not result in query the metrics

[mkelderm]

In the log.cfg, I changed my directory of the $SPLUNK_HOME/var/log files destications. Now I am unable to query the *metrics.log files? No results.... I have restared Splunk> off course. Any idea what can be wrong?

marc

[Ayn · Accepted solution]

Well in what location have you configured Splunk to look for the *metrics.log files? If you move the files, you'll have to change the monitors too.

[Ayn]

in $SPLUNK_HOME/etc/system/default/inputs.conf

[mkelderm]

from $SPLUNK_HOME/var/log/splunk to /var/log/splunk. In which file are the monitors located?