Two unique sourcetypes in directory with hundreds of logs

[johnansett]

Hello!  I am pulling in logs from a server, there are about 500 logs in the directory.  We want to bring in all 498 of them with a generic sourcetype and two need a specific log type.  Is it as easy as this:

[monitor://C:\Program Files\Logs\*]

blacklist = log1:log2

disable=false

index=logs

sourcetype=logs

[monitor://C:\Program Files\Logs\*]

whitelist = log1:log2

disable=false

index=logs

sourcetype=specific:logs

[Hutch]

I agree with @richgalloway .

[richgalloway]

Yes, it's as easy as that.