Getting Data In

inputs.conf | Same folder to be monitored - different source "per host"

New Member

Hello,

I have two servers both of which are in the same deployment class on my server. How can I do different sources per host when the moinotred file is the same?

E.G Server 1: HOSTNAME = UKWEBDEV01
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log Source
= InsitePortalLogs Sourcetype = IIS

Server 2: UKWEBDEV05
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log
C:\FileToMonitor\ABCDE\1234.Log Source
= PlatformPortalLogs Sourcetype = IIS

Thank you!
JG

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!