Monitor directory containing Zip files - Splunk Community

Monitoring Splunk

I have enabled monitoring for zip files and there are two subfolders inside a zip file in that i have a text file LOG_ xxx which only iwant to monitor, I want to ignore the other files inside the zip file.

Also when i index splunk auto decompress the files and extracts as

file.zip:./folder1/folder2/Log_.txt
I only want the Log_.txt

but splunk indexes all the files even if i give the source in the above format like: filename/.zip:./folder1/folder2/LOG_.txt

Need help

Get Updates on the Splunk Community!

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology ...