I figured out the resolution on this. It looks like a bug was fixed in 6.5.1. that resolves an issue with using wildcards in the file monitor for an inputs.conf file. In 6.5, for windows, you have to specify ".." as the wildcard in an inputs.conf monitor. In 6.5.1, for windows, you can specify "..." in an inputs.conf file as the wildcard (per Splunk's documentation). ... View more