Splunk Search

Splunk 6.0.1 recusrsive directory search not hapening



I have a series of Particular file types in a Direcotry of Directories, I tried to index them with monitor on \...\*.. Splunk is performing a recursive search a layet with in the directory but not further. eg: I have a particular file type (say .txt) with in C:\A\B\C\C1(Directory having txt files)\D1(Variable direcotries)\, As per the Splunk documentation I have give the location to monitor as C:\A\B\C\...\*.txt which should have ideally read all the txt files of the locations by recursively searching them... But, in the tailprocessing log - I could only see the level of search till C: direcotry for txt files and not into C1 or D1.

Am I missing anything obvious here?
Is there any parameter, I should enable to get this going?

Is it a bug with Splunk which i couldn't find in Known issues?


Tags (1)
0 Karma

Esteemed Legend

You should be using this for your path-to-file:


If you are, then it is likely that the files contain identical content in important sections and have the same CRC so are being interpreted as the same file (only forward it once):

You can Salt with the filename with crcSalt= so this will not happen.

0 Karma
Get Updates on the Splunk Community!

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...