Installation

How I would use monitor path in my  inputs.conf?

SplunkDash
Motivator

Hello,

How I would use monitor path in my  inputs.conf. All files are in the Windows machine at the location:

MLTS(\\VPWSENTSHMS\CFT\TEST)(L:)

Should it be

[monitor://L:\MLTS\*]

Any recommendations will be highly appreciated. Thank you!

 

 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

if you have a fixed path, you can use the full path e.g.:

[monitor://L:\MLTS\VPWSENTSHMS\CFT\TEST\*.*]

or

[monitor://L:\MLTS\VPWSENTSHMS\CFT\*\*.*]

if instead you could have a variable path, you can use three dots:

[monitor://L:\MLTS\...\*.*]

Remember that in Windows you have to use "*.*" and not "*" as in Unix.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

if you have a fixed path, you can use the full path e.g.:

[monitor://L:\MLTS\VPWSENTSHMS\CFT\TEST\*.*]

or

[monitor://L:\MLTS\VPWSENTSHMS\CFT\*\*.*]

if instead you could have a variable path, you can use three dots:

[monitor://L:\MLTS\...\*.*]

Remember that in Windows you have to use "*.*" and not "*" as in Unix.

Ciao.

Giuseppe

SplunkDash
Motivator

@gcusello 

How would I point path in monitor command if my source files are located in Windows Shared Folder? Is the following should work ("\\servername\comm2\Audit\Logs\" is share folder name) :

[monitor://\\servername\comm2\Audit\Logs\*.log]

Thank you so much!

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkDash,

Using windows, you have to specify the drive you're using:

[monitor://F:\servername\comm2\Audit\Logs\*.log]

Anyway, you can test the path to insert in the monitor stanza header using the "dir" command in cmd window. 

Ciao.

Giuseppe

SplunkDash
Motivator

@gcusello 

This is a great point, thank you, appreciated your support as always.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...