fschange with \...\

[mcbradford]

This is my inputs.conf

[fschange://C:\Users...\AppData\Local\Microsoft\Windows\Burn]
index=windows
recurse=true
sourcetype=opticalmediaburn
pollPeriod=60
followLinks=true
fullEvent=true
delayInMills=1000

I see this in my _internal log

FSChangeMonitor - Monitoring file or directory that doesn't exist at startup time - //C:\Users...\AppData\Local\Microsoft\Windows\Burn

What am I doing wrong. The file/path does exist

[dmaislin_splunk]

You should be using [fschange:] not [fschange://]

Something like this:
[fschange:C:\Users\AppData\Local\Microsoft\Windows\Burn]

[mcbradford]

I changed the syntax to:

[fschange:C:\Users...\AppData\Local\Microsoft\Windows\Burn]

and it is still not working.

Can you use ...\? There are lots of users, so we would not be able to specify a different path for each user.