Monitoring Splunk

Need to index Jenkins Build Log file through inputs.conf in deployment server !

Nithianandan
Observer

Need to monitor highlighted log file without extension in the mentioned folder.

Adminportal_* and 584 will vary accordingly for other build in Jenkins.

 Nithianandan_0-1689164389139.jpeg


I have defined path in different formats in inputs.conf file of Deployment Server. But its not getting indexed.

Here is the content from the inputs.conf from the respective deployment app.

# scan Jenkins Build logs
[monitor://D:\Jenkins_Home\...\*]   --- ?? what is the exact path needs to be defined here ??
disabled = false
recursive = true
#time_before_close = 5
#ignoreOlderThan = 24h
index = jenkins_logs
sourcetype=jenkins:javalog


Thank you !!!

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Clicking in the "breadcrumbs" box at the top of Windows Explorer should change the format to a file path which you can copy-paste into inputs.conf.

Usually, the ... and * would do the job (perhaps monitoring many other files as well), but I suspect wildcards do not apply to hidden directories.  Have you tried these settings?

[monitor://D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log]
disabled = false
index = jenkins_logs
sourcetype=jenkins:javalog

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Nithianandan
Observer

Hi !!

 

Thanks for the response. Tried with the above recommended one, but unfortunately its not working.

Here the folder named 584. Will be vary for the next build, it will increase by one for the next build.

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\585\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\586\log

Also log file which is created is without extension.

Nithianandan_0-1689224975609.png

Thank you !!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please elaborate on "its not working".  What happens and how does that compare to what you expect to happen?  What messages are logged?

If the build number varies then use a wildcard (*) in its place.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...