I am tring to ingest xml file data using below inputs.conf configuration. I am unable to ingest the data. i am not getting any ERROR in internal logs as well. Source Path is as follows:  D:\ARDS\MASS\Data\ExecutionReport\ExecutionReport_Task[SendLabelNetisuq]_Job[5c522e65-a46f-4445-a9ca-3192e6c391b7]_20230614-182807-394995.xml [monitor://D:\ARDS\MASS\Data\ExecutionReport\ExecutionReport_Task[SendLabelNetisuq]_Job*_*.xml] disabled = false sourcetype = abc:xyz:executionreport index = log_abc crcSalt=<SOURCE> ... View more

Hi Team, I have created a props for line breaking. I have tested it using a process of Add Data and Set sourcetype and Advance option. The below props is working fine. While placing the same in HF, its working in consistently. Kindly assist on fixing the same. My props is: [ __auto__learned__ ] SHOULD_LINEMERGE=false NO_BINARY_CHECK=true TIME_FORMAT=%Y-%m-%d %H:%M:%S,%3Q MAX_TIMESTAMP_LOOKAHEAD=23 LINE_BREAKER  =([\r\n]+) TRUNCATE=20000 TIME_PREFIX=^\" ... View more

Hi Folks, I am trying to backlist the gz files in input.conf. But somehow the blacklist doesn't work properly. Files to blacklist:  /var/log/abc.log-20200512.gz /var/log/abc.log-20200510.gz /var/log/messages-20200319.gz I tried this.  [monitor:///var/log/* crcSalt=<SOURCE> blacklist1=\.gz$ But this did not work for some of the files that is mentioned above. Please help with the correct way to blacklist the .gz file. ... View more

Hi Team, I have created an app in DS that has inputs.conf with monitor stanza ( to monitor .trc file). I have created a server class and mapped the App with the client. Now, no data is getting indexed. No internal logs are generated for this configuration.  I have checked the file path and permission is correct. Kindly suggest what steps should I follow to troubleshoot this from UF server side.   Thanks   ... View more