Monitoring Splunk

how to exclude .txt file in log directory from monitoring??

saifuddin9122
Path Finder

Hello,

i have log directory in which all files need to be monitored but i need to exclude file with .txt
am sure that i can do it with by mentioning black list

but the problem is my log file will be in abc.date.txt format.
can i use black list here if so can anyone let me know how??

Thanks in advance

Tags (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

Like this (inside the appropriate stanza inside of inputs.conf):

blacklist = \.\d+\.(txt)$

View solution in original post

0 Karma

woodcock
Esteemed Legend

Like this (inside the appropriate stanza inside of inputs.conf):

blacklist = \.\d+\.(txt)$
0 Karma

saifuddin9122
Path Finder

Thanks it worked.

0 Karma
Get Updates on the Splunk Community!

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...