Installation

How I would use monitor path in my  inputs.conf?

SplunkDash
Motivator

Hello,

How I would use monitor path in my  inputs.conf. All files are in the Windows machine at the location:

MLTS(\\VPWSENTSHMS\CFT\TEST)(L:)

Should it be

[monitor://L:\MLTS\*]

Any recommendations will be highly appreciated. Thank you!

 

 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

if you have a fixed path, you can use the full path e.g.:

[monitor://L:\MLTS\VPWSENTSHMS\CFT\TEST\*.*]

or

[monitor://L:\MLTS\VPWSENTSHMS\CFT\*\*.*]

if instead you could have a variable path, you can use three dots:

[monitor://L:\MLTS\...\*.*]

Remember that in Windows you have to use "*.*" and not "*" as in Unix.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

if you have a fixed path, you can use the full path e.g.:

[monitor://L:\MLTS\VPWSENTSHMS\CFT\TEST\*.*]

or

[monitor://L:\MLTS\VPWSENTSHMS\CFT\*\*.*]

if instead you could have a variable path, you can use three dots:

[monitor://L:\MLTS\...\*.*]

Remember that in Windows you have to use "*.*" and not "*" as in Unix.

Ciao.

Giuseppe

SplunkDash
Motivator

@gcusello 

How would I point path in monitor command if my source files are located in Windows Shared Folder? Is the following should work ("\\servername\comm2\Audit\Logs\" is share folder name) :

[monitor://\\servername\comm2\Audit\Logs\*.log]

Thank you so much!

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

Using windows, you have to specify the drive you're using:

[monitor://F:\servername\comm2\Audit\Logs\*.log]

Anyway, you can test the path to insert in the monitor stanza header using the "dir" command in cmd window. 

Ciao.

Giuseppe

SplunkDash
Motivator

@gcusello 

This is a great point, thank you, appreciated your support as always.

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...