Universal forwarder to monitor multiple files / folders?

[j666gak]

Hi,

Does anybody know if it is possible to get a universal forwarder to monitor multiple files or folders? I know this can't be done from the MSI installer but maybe from the command line?

Could maybe be shortcuts to other files/folders work? would it also sub-directories of a directory specified.

Thanks

[mhouse3]

j666gak did you ever get this to work? The documentation identifies multiple discrete examples but no examples with multiple paths within the a single inputs.conf file.

[sdaniels · Accepted solution]

You can configure that in inputs.conf. Directories, sub-directories, files etc...There are examples on there as well.

http://docs.splunk.com/Documentation/Splunk/latest/admin/Inputsconf

[j666gak]

thank you very much for the advice