Same here, the UF was working fine on a Windows server than suddenly started to not ingest the file anymore. To see the error I had to put in debug mode the universal forwarder. The strange thing is that other files are still monitored and forwarded correctly. I have even added followSymlink=false and CHECK_METHOD=modtime without any luck #inputs.conf [monitor://D:\path\to_*\file-*_*.csv] disabled=0
index=myindex
sourcetype=mysourcetype
crcSalt = <SOURCE> followSymlink=false #props.conf [source::D:\path\to_*\file-*_*.csv]
CHECK_METHOD=modtime
... View more