You should add the following line -on the client side- splunk add monitor /var/log where /var/log is the directory of logs files. Good luck ... View more

I've same problems with splunk v 4.2.3 ... View more