Use of wildcard in input.conf

[jagdipSingh]

Hi All,

I am using wildcard in inputs.conf since very long but recently when I am giving below path with wildcard splunk is not able to capture all the files:

[monitor://C:\logdir\*\*\Katre\log\*.log]

Around 178 files  should get selected with about monitor stanza but splunk forwarder is only send 20-30 files logs.  Am I hitting any limit or there is any limitation.

[vhharanpositka]

Hi @jagdipSingh 

Please try this

[monitor://C:\logdir\*\*\Katre\log\*]

[monitor://C:\logdir\...\...\Katre\log\*]

Regards

[jagdipSingh]

@vhharanpositka  : is there any specific reason you told me to use [monitor://C:\logdir\*\*\Katre\log\*] rather than what I was using : [monitor://C:\logdir\*\*\Katre\log\*.log]

just asking to know what will it tune.