Getting Data In

input stanza for on prem codedeploy logs

bobmccoy
Explorer

we use codedeploy to deploy to some of our on prem servers with the codedepoy agent
it logs to C:\Deployments\xxxxxx-Web\LogHtml and the log is an html
the log file is named like :

xxxxxx-Web_xxxxxx-Web_2018-03-05_05-06-57.html

I am using:
[monitor://C:\Deployments\xxxxxx-Web\LogHtml*.html]
disabled = false
sourcetype = web
index = xxxxxxx

And I am not getting anything from this location in my index

any ideas

Tags (2)
0 Karma

somesoni2
Revered Legend

If C:\Deployments\xxxxxx-Web\LogHtml is the directory name and xxxxxx-Web_xxxxxx-Web_2018-03-05_05-06-57.html is the file name, your monitoring stanza should be like this

[monitor://C:\Deployments\*-Web\LogHtml\*-Web_*.html]
0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...