Security

error while giving path for different servers

rupesh212121
Explorer

hi my scenario is i am having different servers in which same services are running like httpd, maillog, errorlog and i want to see logs of all these servers. i have tried to give path for both the servers for seeing it access logs as /var/logs/httpd/access_logs and it gave me the following error.

"Encountered the following error while trying to save: In handler 'monitor': Cannot create another input with the name "/var/log/httpd/access_log", one already exists."

how can i see the same logs of two different servers.

plz help me in this regard.

thank u Prakash

Tags (1)
0 Karma

LCM
Contributor

Basically, you do:

Server 1 (Indexer - MASTER)

  1. Manager » Data inputs » Files & Directories » Add New --> */var/log/httpd/access_log*
  2. Manager » Forwarding and receiving » Receive data » Add New --> 9997

Server 2 (Forwarder - CLIENT)

  1. Manager » Data inputs » Files & Directories » Add New --> */var/log/httpd/access_log*
  2. Manager » Forwarding and receiving » Forward data » Add New --> < ip.from.your.master:9997 >

Please, read through following docs as well:

LCM
Contributor

That error means you already configured that path for monitoring then. There is no reason to configure it twice. Can you double check, if you entered that path before

rupesh212121
Explorer

but it is not accepting the path as it is saying the path already exist.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...

Keep the Learning Going with the New Best of .conf Hub

Hello Splunkers, With .conf26 getting closer, there’s already a lot of excitement building around this year’s ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...