Need input stanza for a shared drive

[anandhalagarasa]

Hi Team,

I have a following path which is located in a shared drive so how should i need to write the inputs.conf (monitor stanza)..

i.e
index=xyz
sourcetype=abc

So the full path for the log file folder would be:

M:\Local\orex\keen\Archive\Error_Path\

Here Local folder is a shared drive in between. So kindly help to provide the inputs.conf for the file.

[harsmarvania57]

Hi,

Have you tried M:\Local\orex\keen\Archive\Error_Path\ in monitor stanza in inputs.conf ? If yes then is it not working ?

[anandhalagarasa]

I have already tried the way which you have suggested but still logs were not getting ingested into Splunk. And also currently I have tried this one as well. Since the folder "Local" is a shared one but still its not working.

[monitor://\M:\Local\orex\keen\Archive\Error_Path]

Hence kindly help

[harsmarvania57]

Ok, I never tried this before but can you please run net use on command prompt on windows server and try to use Remote path in your monitor stanza ?

Have a look at comment by gkanapathy on https://answers.splunk.com/answers/1730/windows-mapped-drive-and-light-forwarding.html