Splunk Search

How to scan log files

cppandey80
New Member

I have log files which are in below format , I would like to scan them.
When one logs reached to its size limit then new log file is created.

console_Server1_1.log
console_Server1_2.log
console_Server1_3.log
console_Server1_4.log
console_Server1_n.log

On Other servers these files are like

console_Server2_1.log
console_Server2_2.log
console_Server2_3.log
console_Server2_4.log
console_Server2_n.log

but in the same folder, there are other files too, which I don't like to scan.
e.g.

console_server1_2016_08_19@23_11_32.log

Any leads?

Tags (1)
0 Karma

TStrauch
Communicator

Hi cppandey80,

in the monitor stanza of your inputs.conf you can use Regular Expressions and Wildcards, for defining file paths.

Just take a look at this and i think you will find your solution.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Data/Specifyinputpathswithwildcards

regards

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...