Getting Data In

Universal forwarder to monitor multiple files / folders?

j666gak
Communicator

Hi,

Does anybody know if it is possible to get a universal forwarder to monitor multiple files or folders? I know this can't be done from the MSI installer but maybe from the command line?

Could maybe be shortcuts to other files/folders work? would it also sub-directories of a directory specified.

Thanks

Tags (2)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

View solution in original post

mhouse3
Path Finder

j666gak did you ever get this to work? The documentation identifies multiple discrete examples but no examples with multiple paths within the a single inputs.conf file.

0 Karma

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

j666gak
Communicator

thank you very much for the advice

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...