how to send the local file using splunk forwarder docker image?

[johnbaekkkk]


splunkuniversalforwarder:
image: splunk/universalforwarder
environment:
- SPLUNK_START_ARGS=--accept-license
- SPLUNK_FORWARD_SERVER=ops-splunkhead02.dop.sfdc.net:9997
- SPLUNK_USER=root
- SPLUNK_PASSWORD=xxxx
ports:
- 9997:9997


I store the log flie in /var/logs/serviceLog.log (Not in the container but in the local machine)

I don't see the parameter to pass the file path;;; Seems like the splunk forwarder is running in the background and I just realized I never pass the log source variable to the container!

Does anyone perhaps have an idea?

[xavierashe]

run docker exec and then use the Splunk CLI to add the inputs

/opt/splunk/bin/splunk add monitor /var/log/logfile.txt -index newindex