Search

phanichintha · ‎07-27-2020

Hello, In one of the windows machine logs (path: C:\servicedesk\logs) sending via the universal forwarder to Splunk. So I created inputs.conf and below are the monitor paths, so now am getting l...

hartfoml · ‎11-30-2011

balcv · ‎05-25-2021

I have a host that I am receiving logs into my heavy forwarder and that works fine. I now have a new log source on the same host and the entry in my inputs.conf is not passing the data I need t...

splunkcol · ‎12-03-2020

...hey talk about modifying the file "props.conf" and "transforms.conf" what is the difference between doing it from inputs.conf and the other way? inputs.log [monitor:///folder/folder/folder/i...

jip31 · ‎09-19-2023

Hi I have a basic questions about the inputs.conf file In our apps, we have a inputs.conf file under etc/apps/test/inputs.conf what is normal But what is the difference between etc/system/l...

SplunkExplorer · ‎10-06-2023

Hi Splunkers, I have a problem with a blacklist filter. On customer's UF, we filtered out some events changing the inputs.conf file. The ones based on comma separated list, like Windows EventID, a...

ITSplunk117 · ‎12-28-2022

I'm working on an input.conf from a universal forwarder when I noticed the first stanza is missing a ] ex: [WinEventLog://Application instead of [WinEventLog://Application] Since I d...

Abass42 · ‎03-30-2023

Im a splunk admin and I got asked to update the inputs.conf file for the app pingfederate. Im a little unsure of how to do it and I figured id ask here instead of bricking our prod system. T...

dchodur · ‎01-29-2013

Anyone know why 5.0.1 UFs are reporting data in with host name of $decideonstartup. Looks like this setting was added in 5.0 for the inputs.conf file and the default for system/default/inputs.conf....

zekiramhi · ‎11-25-2020

Hello, I have made a new app under deployment apps with the following inputs.conf [monitor:///root/something/something/something/something/] index = test whitelist=console-202[\S\s...

Search

Search

Search the Community

inputs.conf

Inputs.conf

inputs.conf issue

blacklist inputs.conf

Help on inputs.conf

UF inputs.conf blacklist rege based not working

UF inputs.conf stanza

Update The inputs.conf on an app

Inputs.conf $decideonstartup

Question about Inputs.conf