Monitoring Splunk

how to exclude .txt file in log directory from monitoring??

saifuddin9122
Path Finder

Hello,

i have log directory in which all files need to be monitored but i need to exclude file with .txt
am sure that i can do it with by mentioning black list

but the problem is my log file will be in abc.date.txt format.
can i use black list here if so can anyone let me know how??

Thanks in advance

Tags (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

Like this (inside the appropriate stanza inside of inputs.conf):

blacklist = \.\d+\.(txt)$

View solution in original post

0 Karma

woodcock
Esteemed Legend

Like this (inside the appropriate stanza inside of inputs.conf):

blacklist = \.\d+\.(txt)$
0 Karma

saifuddin9122
Path Finder

Thanks it worked.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...