Splunk 6.0.1 recusrsive directory search not hapening

[anirudhk]

Hi,

I have a series of Particular file types in a Direcotry of Directories, I tried to index them with monitor on \...\*.. Splunk is performing a recursive search a layet with in the directory but not further. eg: I have a particular file type (say .txt) with in C:\A\B\C\C1(Directory having txt files)\D1(Variable direcotries)\, As per the Splunk documentation I have give the location to monitor as C:\A\B\C\...\*.txt which should have ideally read all the txt files of the locations by recursively searching them... But, in the tailprocessing log - I could only see the level of search till C: direcotry for txt files and not into C1 or D1.

Am I missing anything obvious here?
Is there any parameter, I should enable to get this going?

Is it a bug with Splunk which i couldn't find in Known issues?

Regards
Anirudh

[woodcock]

You should be using this for your path-to-file:

C:\ABC\...\*.txt

If you are, then it is likely that the files contain identical content in important sections and have the same CRC so are being interpreted as the same file (only forward it once):
http://docs.splunk.com/Documentation/Splunk/latest/Data/Howlogfilerotationishandled

You can Salt with the filename with crcSalt= so this will not happen.