I need to index a CSV file that gets created daily in a folder with that day's name on it.
So today's path is ..long path...\default\20111128\2Eb4DcXy.csv
Can I use wildcards or a variable for date in the inputs.conf in order to grab this file? Like this: ..long path....\default\ * \2Eb4DcXy.csv
You can use the "..." syntax to recurse directories and
Here is an example in the inputs.conf file:
[monitor::...default...2Eb4Dcy.csv]
or
[monitor::...default*2Eb4Dcy.csv]
or
[monitor::...default...]
Here is a link to more information:
http://docs.splunk.com/Documentation/Splunk/4.2.4/Data/Specifyinputpathswithwildcards
Yes, this work on linux and Windows as well.
Does this work for Windows sources also?