Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
7,000 results
Sorted by:
07-27-2020
01:46 AM
Hello, In one of the windows machine logs (path: C:\servicedesk\logs) sending via the universal forwarder to Splunk. So I created inputs.conf and below are the monitor paths, so now am getting l...
- Tags:
- Any
Labels
- Labels:
-
configuration
12-03-2020
10:07 AM
...hey talk about modifying the file "props.conf" and "transforms.conf" what is the difference between doing it from inputs.conf and the other way? inputs.log [monitor:///folder/folder/folder/i...
Labels
11-30-2011
09:32 AM
1 Karma
I have this in my inputs.conf
_whitelist=(\.log|log$|^messages|^secure|mesg$|cron$|acpid$|\.out)
Can anyone help me understand what are the " ^ " and the " $ " are used for?
- Tags:
- inputs.conf
11-25-2020
05:01 AM
Hello, I have made a new app under deployment apps with the following inputs.conf [monitor:///root/something/something/something/something/]
index = test
whitelist=console-202[\S\s...
- Tags:
- Deployment Server
Labels
09-26-2017
08:37 AM
hi,
can you please tell me what is the right way to btool inputs.conf for a specific app context. I want to troubleshoot this error that is too much in my splunk search head messages n...
11-07-2019
08:08 PM
...owever the log stops when I use the wild card.
My inputs.conf looks like:
[monitor://D:\[path]\logs\]
whitelist=localhost_access_log*txt
disabled = 0
I've tried numerous variations such as * ......
02-12-2020
08:00 AM
Hello
I have some directories that I need to monitor. Using updated inputs for the TA_nix app I am adding syslog/linux:audit data is specific paths. It mostly works as expected BUT I had a few o...
12-06-2017
06:26 PM
Hi,
Is this interval field in the inputs.conf in seconds or minutes?
Cheers,
Jeremy
01-29-2013
02:15 PM
1 Karma
Anyone know why 5.0.1 UFs are reporting data in with host name of $decideonstartup. Looks like this setting was added in 5.0 for the inputs.conf file and the default for system/default/inputs.conf....
- Tags:
- inputs.conf
Show results in replies (3)
-
...ew 5.0.1) it will create 3 files in etc/system/local. One of these files is an inputs.conf file with t...
-
...tc\system\local\inputs.conf ( echo [default] >> \\%1\c$\PROGRA~1\SplunkUniversalForwarder\e...
-
Matt: I had to specify the host name in my inputs.conf file manually to make perfmon stats c...
12-17-2019
04:55 AM
...hose hosts.
I do not want to push individual inputs.conf files. So how to I get the appropriate host name for the syslog input?
If I leave host emtpy, I get 127.0.0.1 which is not helpful. When I s...
