Not able to add monitor a directory. I'm getting Parameters must be in the form '-parameter value' error.

[druvakumar]

I tried two ways
1). C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor -source C:\Program Files\Atlassian\Application Data\JIRA\log
Parameters must be in the form '-parameter value'

2). C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor -source C:\Program Files\Atlassian\Application Data\JIRA\log\atlassian-jira.log
Parameters must be in the form '-parameter value'

I'm getting I'm getting Parameters must be in the form '-parameter value' error. Can someone help me here?

[p_gurav · Accepted solution]

Can you try:

C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor C:\Program Files\Atlassian\Application Data\JIRA\log

Also try using tab for auto selecting source name including space.

[druvakumar]

I tried "C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor C:\Program Files\Atlassian\Application Data\JIRA\log" this aswell, it didn't work
is there any other param which we need to include?

[p_gurav]

Can you try putting source in double quotes:

C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor "C:\Program Files\Atlassian\Application Data\JIRA\log"

[druvakumar]

Thank you! it worked 🙂

[richgalloway]

Splunk is probably not liking the space in the source file name. Try putting double quotes around the name or use the 8.3 form of file name (C:\Progra~1\...).

[vishwanthini]

By using double quotes around the path worked for me. Until i put it in double quotes, i kept getting the "Parameters must be in the form '-parameter value'" error

Here is the command i used
C:\Program Files\SplunkUniversalForwarder\bin>splunk install app "C:\Program Files\Splunk\splunkclouduf.spl" -auth admin:changeme