In the log.cfg, I changed my directory of the $SPLUNK_HOME/var/log files destications. Now I am unable to query the *metrics.log files? No results.... I have restared Splunk> off course. Any idea what can be wrong?
Well in what location have you configured Splunk to look for the *metrics.log files? If you move the files, you'll have to change the monitors too.
View solution in original post
from $SPLUNK_HOME/var/log/splunk to /var/log/splunk. In which file are the monitors located?