Not sure if there's some reason not to do this versus ron's answer, but I have a monitor pointing to a directory and I simply have source=sourcename in the stanza in inputs.conf, which causes there to be only one source set. inputs.conf: [monitor://my_directory] source=singlesourcename sourcetype=mysourcetype ... View more