I have a issue with picking up the keyword from a tail of a text file. Reading through the documention found that there is a suggestion to add 'followTail = 1' to the inputs.conf file. Now ( i hope i am right) the input.conf that i need to edit is: C:\Program Files\Splunk\etc\apps\SplunkLightForwarder\default unfortunately, this file cannot be edited or saved, as system complains that 'access is denied'. Then i stopped the splunkd and splunkweb, services, and put them as manual rather than automatic, and restarted the machine. Verified that the services mentioned were not running, but still there seems to be a lock on the file. I am editing the correct inputs.conf file? How can i successfully edit the file and add the changes? ... View more

I would like to setup splunk so that i can pick up keywords the instant they appear in a text file. The text file is continiously being updated, and therefore the challenge is to pick up the keyword in the new text that was written to the file, and not look at the old text. I want to be notified via email the moment that keyword appears in the text file. How can i achieve this in splunk: What schedule type do i need? Run every ? Alert condition setting? Throttle setting? Expiration setting? regards ... View more

Hello i have been struggling to get some logs from a machine on a non-windows platform. Would like to know if it is possible to ftp into such a machine, provide username and password for authentication, and the path of the logs that need to be monitored, with keywords to look out for? ... View more

I would like to know if it is possible to monitor some text based log files, that reside on a system running QNX OS. Would like to know what needs to be done. Besides the IP of the machine, machine name, what other information do i need to have in order to establish a connection between the splunk server and QNX machine? Would i need to install a forwarder on the QNX machine? ... View more