Instead of using the *.log, use the whitelist and do not escape the parenthesis. I also found no need to escape the backslashes in the path. [source::C:\Program Files (x86)\Application\Application Logs\Logs\] sourcetype = custom_sourcetype whitelist = \.log$ This whitelist will only match files with .log at the very end. So its not going to grab other stuff like blah.log.bak remove the $ to get files with stuff past the .log. ... View more

The throttled is set to a 256 Kb/s on a UF, but you can set this to whatever rate you like, higher or lower, in the limits.conf file, e.g.: [thruput] maxKBps = 128 Setting it to "0" makes the maximum rate unlimited (up to the capacity of the process and the machine). ... View more