Hi,
I'm using Splunk 6.1.3 for Windows and have an issue with indexing files that reside in a folder that contains periods in the folder name.
An example is D:\Application\Logs\Z.Y.Z\APP01_13776_20161019.log
I have attempted a few different syntax formats listed below and will not index the files. Any suggestions as to how I can identify why it's not indexing these APP*.log files?
[monitor://D:\Application\Logs\...\APP*.log]
crcSalt =
ignoreOlderThan = 2d
index = indexname
sourcetype = sourcetypename
recursive=false
disabled=false
[monitor://D:\Application\Logs\X.Y.Z\APP*.log]
crcSalt =
ignoreOlderThan = 2d
index = indexname
sourcetype = sourcetypename
recursive=false
disabled=false
Thanks for any assistance.
... View more