Getting Data In

Why am I getting an absolute path error on the first monitor entry in my inputs.conf file on Windows?

zbumpers
New Member

I am getting an "is not absolute. This is a configuration error and may not work / break things. Change this path to an absolute path." error on the first entry in my conf file.

[monitor://D:Program Files\system\AB\LogFiles\error.log
disabled = false
sourcetype = error

[WinEventLog://System]
disabled = 0
sourcetype = SystemEvtLog

I believe its due to the space between Program and Files. I have tried various wildcards with no success.

Windows 2003
Splunk 6.0.1

Suggestions appreciated.

0 Karma

omgwut56k
Path Finder

Are you missing a close paren? ]

0 Karma

wcolgate_splunk
Splunk Employee
Splunk Employee

Was it just a paste issue that you are also missing the backslashes?

Get Updates on the Splunk Community!

New Cloud Intrusion Detection System Add-on for Splunk

In July 2022 Splunk released the Cloud IDS add-on which expanded Splunk capabilities in security and data ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...