Splunk Search

How to scan log files

cppandey80
New Member

I have log files which are in below format , I would like to scan them.
When one logs reached to its size limit then new log file is created.

console_Server1_1.log
console_Server1_2.log
console_Server1_3.log
console_Server1_4.log
console_Server1_n.log

On Other servers these files are like

console_Server2_1.log
console_Server2_2.log
console_Server2_3.log
console_Server2_4.log
console_Server2_n.log

but in the same folder, there are other files too, which I don't like to scan.
e.g.

console_server1_2016_08_19@23_11_32.log

Any leads?

Tags (1)
0 Karma

TStrauch
Communicator

Hi cppandey80,

in the monitor stanza of your inputs.conf you can use Regular Expressions and Wildcards, for defining file paths.

Just take a look at this and i think you will find your solution.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Data/Specifyinputpathswithwildcards

regards

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...