I'm using a deployment server to distribute a single inputs.conf file to a number of servers in a class. The locations of the files that I need to monitor are similar between the servers, but sometimes (sub)directories refer to the servers instead of being generically named. This circumstance made me reach for wildcards / whitelists in determining the paths of the files to watch. (The alternative would be creating separate monitor stanzas for each individual server in the class, which defeats the purpose.) Can't get it to work, though. What am I missing?
These are the directories / files on the various servers I want to monitor:
/base/logs/appl/xxx.seg.ex/logfile1.log
/base/logs/appl/xxx.seg.ex/logfile2.log
/base/logs/appl/yyy.seg.ex/logfile1.log
/base/logs/appl/yyy.seg.ex/logfile2.log
And these are the monitor stanzas I'd set up in inputs.conf:
[monitor:///base/logs/appl/*.seg.ex/logfile1.log]
index=index
[monitor:///base/logs/appl/*.seg.ex/logfile2.log]
index=index
Unfortunately this does not work...
Checking the _internal index made clear that the monitor stanzas are not OK. Apparently implicit whitelists were added:
'^\/base\/logs\/appl/[^/]*.seg.ex/logfile1.log$' (on path 'monitor:///base/logs/appl') [1]
'^\/base\/logs\/appl/[^/]*.seg.ex/logfile2.log$' (on path 'monitor:///base/logs/appl') [2]
The _internal index also contains logevents saying:
TailingProcessor - Will not call watch on path '/base/logs/appl/xxx.seg.ex/logfile1.log due to stanza: monitor:///base/logs/appl/*.seg.ex/logfile1.log [1]
TailingProcessor - Will not call watch on path '/base/logs/appl/xxx.seg.ex/logfile2.log due to stanza: monitor:///base/logs/appl/*.seg.ex/logfile1.log [2]
Why doesn't this work? And how could I get it to work as desired?
... View more