Monitoring Splunk

Need to index Jenkins Build Log file through inputs.conf in deployment server !

Nithianandan
Observer

Need to monitor highlighted log file without extension in the mentioned folder.

Adminportal_* and 584 will vary accordingly for other build in Jenkins.

 Nithianandan_0-1689164389139.jpeg


I have defined path in different formats in inputs.conf file of Deployment Server. But its not getting indexed.

Here is the content from the inputs.conf from the respective deployment app.

# scan Jenkins Build logs
[monitor://D:\Jenkins_Home\...\*]   --- ?? what is the exact path needs to be defined here ??
disabled = false
recursive = true
#time_before_close = 5
#ignoreOlderThan = 24h
index = jenkins_logs
sourcetype=jenkins:javalog


Thank you !!!

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Clicking in the "breadcrumbs" box at the top of Windows Explorer should change the format to a file path which you can copy-paste into inputs.conf.

Usually, the ... and * would do the job (perhaps monitoring many other files as well), but I suspect wildcards do not apply to hidden directories.  Have you tried these settings?

[monitor://D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log]
disabled = false
index = jenkins_logs
sourcetype=jenkins:javalog

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Nithianandan
Observer

Hi !!

 

Thanks for the response. Tried with the above recommended one, but unfortunately its not working.

Here the folder named 584. Will be vary for the next build, it will increase by one for the next build.

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\585\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\586\log

Also log file which is created is without extension.

Nithianandan_0-1689224975609.png

Thank you !!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please elaborate on "its not working".  What happens and how does that compare to what you expect to happen?  What messages are logged?

If the build number varies then use a wildcard (*) in its place.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...