Monitoring Splunk

Need to index Jenkins Build Log file through inputs.conf in deployment server !

Nithianandan
Observer

Need to monitor highlighted log file without extension in the mentioned folder.

Adminportal_* and 584 will vary accordingly for other build in Jenkins.

 Nithianandan_0-1689164389139.jpeg


I have defined path in different formats in inputs.conf file of Deployment Server. But its not getting indexed.

Here is the content from the inputs.conf from the respective deployment app.

# scan Jenkins Build logs
[monitor://D:\Jenkins_Home\...\*]   --- ?? what is the exact path needs to be defined here ??
disabled = false
recursive = true
#time_before_close = 5
#ignoreOlderThan = 24h
index = jenkins_logs
sourcetype=jenkins:javalog


Thank you !!!

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Clicking in the "breadcrumbs" box at the top of Windows Explorer should change the format to a file path which you can copy-paste into inputs.conf.

Usually, the ... and * would do the job (perhaps monitoring many other files as well), but I suspect wildcards do not apply to hidden directories.  Have you tried these settings?

[monitor://D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log]
disabled = false
index = jenkins_logs
sourcetype=jenkins:javalog

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Nithianandan
Observer

Hi !!

 

Thanks for the response. Tried with the above recommended one, but unfortunately its not working.

Here the folder named 584. Will be vary for the next build, it will increase by one for the next build.

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\585\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\586\log

Also log file which is created is without extension.

Nithianandan_0-1689224975609.png

Thank you !!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please elaborate on "its not working".  What happens and how does that compare to what you expect to happen?  What messages are logged?

If the build number varies then use a wildcard (*) in its place.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...