So, this is my problem area of a inputs.conf file on a box with a 4.2.2 universal forwarder:
Directory names made up here, but you get the idea.
[monitor://C:\Program Files (x86)\DirectoryName\...\Logs]
sourcetype = pah
index = sandbox
disabled = false
The problem is that regardless of if I use a ... or an * it refuses to even acknowledge the paths I want. Further, there are no indications of ANY errors in the logs.
The two paths I'm trying to monitor with this wildcard are:
C:\Program Files
(x86)\DirectoryName\Name Name Name -
Test\Logs C:\Program Files
(x86)\DirectoryName\Name Name Name -
Live\Logs
Important to note that if I remove the wildcard and just use:
C:\Program Files
(x86)\DirectoryName\Name Name Name -
Live
It recursively loads all the files just fine. Before you ask, I've cleaned the index and to be certain I've even manually created new files in there for it to pick up, which it doesn't.
Any idea why this isn't working?
... View more