Monitoring Splunk

Need to index Jenkins Build Log file through inputs.conf in deployment server !

Nithianandan
Observer

Need to monitor highlighted log file without extension in the mentioned folder.

Adminportal_* and 584 will vary accordingly for other build in Jenkins.

 Nithianandan_0-1689164389139.jpeg


I have defined path in different formats in inputs.conf file of Deployment Server. But its not getting indexed.

Here is the content from the inputs.conf from the respective deployment app.

# scan Jenkins Build logs
[monitor://D:\Jenkins_Home\...\*]   --- ?? what is the exact path needs to be defined here ??
disabled = false
recursive = true
#time_before_close = 5
#ignoreOlderThan = 24h
index = jenkins_logs
sourcetype=jenkins:javalog


Thank you !!!

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Clicking in the "breadcrumbs" box at the top of Windows Explorer should change the format to a file path which you can copy-paste into inputs.conf.

Usually, the ... and * would do the job (perhaps monitoring many other files as well), but I suspect wildcards do not apply to hidden directories.  Have you tried these settings?

[monitor://D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log]
disabled = false
index = jenkins_logs
sourcetype=jenkins:javalog

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Nithianandan
Observer

Hi !!

 

Thanks for the response. Tried with the above recommended one, but unfortunately its not working.

Here the folder named 584. Will be vary for the next build, it will increase by one for the next build.

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\585\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\586\log

Also log file which is created is without extension.

Nithianandan_0-1689224975609.png

Thank you !!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please elaborate on "its not working".  What happens and how does that compare to what you expect to happen?  What messages are logged?

If the build number varies then use a wildcard (*) in its place.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...

State of Splunk Careers 2024: Maximizing Career Outcomes and the Continued Value of ...

For the past four years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...

Data-Driven Success: Splunk & Financial Services

Splunk streamlines the process of extracting insights from large volumes of data. In this fast-paced world, ...