how to connect to a local log file which will be updating everytime

[prakashv546]

i want to create a alert on log file which will be updating frequently..plz tell me the way to connect to that log file which will be updating..i am using splunk enterprise

[muebel]

Hi prakashv546, You'll want to setup a input monitor on the files. See: http://docs.splunk.com/Documentation/Splunk/6.5.2/Data/Monitorfilesanddirectorieswithinputs.conf for more details on how to accomplish this.

Splunk quite readily handles continually-written-to files, and so that shouldn't be an issue

Please let me know if this answers your question! 😄

[adonio]

Hi prakashv546,
can you elaborate on your question? Did you bring the data (log file) to Splunk? if not, is it local to the Splunk server?