Getting Data In

inputs.conf | Same folder to be monitored - different source "per host"

JohnGilmour
New Member

Hello,

I have two servers both of which are in the same deployment class on my server. How can I do different sources per host when the moinotred file is the same?

E.G Server 1: HOSTNAME = UKWEBDEV01
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log Source
= InsitePortalLogs Sourcetype = IIS

Server 2: UKWEBDEV05
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log Source
= PlatformPortalLogs Sourcetype = IIS

Thank you!
JG

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...