$/opt/splunkforwarder/bin/splunk list monitor
Monitored Directories:
[No directories monitored.]
Monitored Files:
/var/log
/var/log/audit
/var/log/opscode
/var/log/opscode/bookshelf/current
The "Monitored Directories" section lists the batch://
inputs.
The "Monitored Files" section lists the monitor://
intputs.
About [No directories monitored.] at Why does inputs.conf does not respect the use of a wildcard (batch*) in my monitor stanza?
What is your question?
So the questions is:
Why am i getting "[No directories monitored.]", when i have :
[root@chef-nonprod-fe1 local]# cat inputs.conf
[default]
[monitor:///var/log/]
[monitor:///var/log/audit/]
[monitor:///var/log/opscode/]
host = chef-nonprod-fe1.a.b.c
[root@chef-nonprod-fe1 local]# pwd
/opt/splunkforwarder/etc/system/local