Hi Team,
I have a following path which is located in a shared drive so how should i need to write the inputs.conf (monitor stanza)..
i.e
index=xyz
sourcetype=abc
So the full path for the log file folder would be:
M:\Local\orex\keen\Archive\Error_Path\
Here Local folder is a shared drive in between. So kindly help to provide the inputs.conf for the file.
Hi,
Have you tried M:\Local\orex\keen\Archive\Error_Path\
in monitor stanza in inputs.conf ? If yes then is it not working ?
I have already tried the way which you have suggested but still logs were not getting ingested into Splunk. And also currently I have tried this one as well. Since the folder "Local" is a shared one but still its not working.
[monitor://\M:\Local\orex\keen\Archive\Error_Path]
Hence kindly help
Ok, I never tried this before but can you please run net use
on command prompt on windows server and try to use Remote path in your monitor stanza ?
Have a look at comment by gkanapathy on https://answers.splunk.com/answers/1730/windows-mapped-drive-and-light-forwarding.html