HI, i have added below in inputs.conf file it is not showing the changes after updating sample.conf file and using below search command index=file_monitor sourcetype=fschange | diff diffheader=true | highlight +,- inputs.conf [fschange://home/splunk/config] disabled = 0 host = 12b8-spnfwd03 index = file_monitor recurse = true pollPeriod = 1 fullEvent = true sendEventMaxSize = -1 hashMaxSize = 99999999 sourcetype = fschange [monitor:///home/splunk/config/sample.conf] followTail = 0 host = 12b8-spnfwd03 disabled = false index = file_monitor sourcetype = fschange ... View more