Getting Data In

Universal forwarder to monitor multiple files / folders?

j666gak
Communicator

Hi,

Does anybody know if it is possible to get a universal forwarder to monitor multiple files or folders? I know this can't be done from the MSI installer but maybe from the command line?

Could maybe be shortcuts to other files/folders work? would it also sub-directories of a directory specified.

Thanks

Tags (2)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

View solution in original post

mhouse3
Path Finder

j666gak did you ever get this to work? The documentation identifies multiple discrete examples but no examples with multiple paths within the a single inputs.conf file.

0 Karma

sdaniels
Splunk Employee
Splunk Employee

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

j666gak
Communicator

thank you very much for the advice

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...