Monitoring Splunk

Need to index Jenkins Build Log file through inputs.conf in deployment server !

Nithianandan
Observer

Need to monitor highlighted log file without extension in the mentioned folder.

Adminportal_* and 584 will vary accordingly for other build in Jenkins.

 Nithianandan_0-1689164389139.jpeg


I have defined path in different formats in inputs.conf file of Deployment Server. But its not getting indexed.

Here is the content from the inputs.conf from the respective deployment app.

# scan Jenkins Build logs
[monitor://D:\Jenkins_Home\...\*]   --- ?? what is the exact path needs to be defined here ??
disabled = false
recursive = true
#time_before_close = 5
#ignoreOlderThan = 24h
index = jenkins_logs
sourcetype=jenkins:javalog


Thank you !!!

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Clicking in the "breadcrumbs" box at the top of Windows Explorer should change the format to a file path which you can copy-paste into inputs.conf.

Usually, the ... and * would do the job (perhaps monitoring many other files as well), but I suspect wildcards do not apply to hidden directories.  Have you tried these settings?

[monitor://D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log]
disabled = false
index = jenkins_logs
sourcetype=jenkins:javalog

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Nithianandan
Observer

Hi !!

 

Thanks for the response. Tried with the above recommended one, but unfortunately its not working.

Here the folder named 584. Will be vary for the next build, it will increase by one for the next build.

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\584\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\585\log

D:\Jenkins_Home\.jenkins\jobs\Adminportal_Multi_Deploy_Request\builds\586\log

Also log file which is created is without extension.

Nithianandan_0-1689224975609.png

Thank you !!

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please elaborate on "its not working".  What happens and how does that compare to what you expect to happen?  What messages are logged?

If the build number varies then use a wildcard (*) in its place.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...