Splunk Search

How my file path name is modified automatically

anil1432
Explorer

I have one file  which is monitoring from 1 year in deployment server in inputs my file name is   sourcetype: D:\Applications\Smartfill-tools\*\logs\*.log . I received my logs correctly till 2nd April , but after that m geeting error like this 

 

 

And also file is modified automatically on March 18th D:\Applications\Smartfill-tools\*\logs\*.log  To 

D:\Applications\Smartfill-Tools\*\logs\*.log  and if I check with this 

D:\Applications\Smartfill-Tools\*\logs\*.log again my logs are coming. But I don't know how file path name is modified . And also deployment server in inputs the file path is 

D:\Applications\Smartfill-tools\*\logs\*.log and if I change to this 

D:\Applications\Smartfill-Tools\*\logs\*.log and deployed .then if I check  in search then my logs are coming.

I want to know how file path is modified automatically and also small change small "t" to capital "T" is changed .

 

 

If you want more information please reach me out 

 

 

 

 

0 Karma

anil1432
Explorer

IMG_20210614_073422.jpg

0 Karma

anil1432
Explorer

If I give capital "T" in place of small "t" then my logs started genarating . What might be the solution

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...