Installation

How would I initialize monitor command to pull the data/files from variable paths /locations?

SplunkDash
Motivator

Hello,

How would I initialize monitor command to pull the data/files from variable paths /locations? Some examples along with monitor command provided below:

Paths/Locations:

/RTAM/PROD_LOGS/PROD_DATA/2021-01-28_03-39-15/AUDITDATA/APPS/AUDITPROD.txt

/RTAM/PROD_LOGS/PROD_DATA/2021-01-29_09-12-12/AUDITDATA/APPS/AUDITPROD.txt

.........

..........

.........

/RTAM/PROD_LOGS/PROD_DATA/2021-02-02_06-19-10/AUDITDATA/APPS/AUDITPROD.txt

/RTAM/PROD_LOGS/PROD_DATA/2021-02-02_08-07-14/AUDITDATA/APPS/AUDITPROD.txt

Monitor Command I wrote:

[monitor://

/RTAM/PROD_LOGS/PROD_DATA/.../AUDITDATA/APPS/AUDITPROD.txt]

is this going to work to pull the data/files from all of the locations mentioned above? Any help/feedback will be highly appreciated. Thank you.

Labels (1)
0 Karma
1 Solution

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

instaed of ... (ellipsis wildcard) , please use(*)asterisk wildcard for moniting the path 

[monitor:///RTAM/PROD_LOGS/PROD_DATA/*/AUDITDATA/APPS/AUDITPROD.txt]

 

SanjayReddy_0-1646193106443.png

 

 

 

---
If this reply helps you, an upvote/Karma would be appreciated.

View solution in original post

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

instaed of ... (ellipsis wildcard) , please use(*)asterisk wildcard for moniting the path 

[monitor:///RTAM/PROD_LOGS/PROD_DATA/*/AUDITDATA/APPS/AUDITPROD.txt]

 

SanjayReddy_0-1646193106443.png

 

 

 

---
If this reply helps you, an upvote/Karma would be appreciated.

Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...