Getting Data In

Universal forwarder to monitor multiple files / folders?

j666gak
Communicator

Hi,

Does anybody know if it is possible to get a universal forwarder to monitor multiple files or folders? I know this can't be done from the MSI installer but maybe from the command line?

Could maybe be shortcuts to other files/folders work? would it also sub-directories of a directory specified.

Thanks

Tags (2)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

View solution in original post

mhouse3
Path Finder

j666gak did you ever get this to work? The documentation identifies multiple discrete examples but no examples with multiple paths within the a single inputs.conf file.

0 Karma

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

j666gak
Communicator

thank you very much for the advice

0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...