I have a set of DCs from where i need to monitor the Device logs which is located in a shared path.. I tried entering the below stanzas for each server and DC separately which worked. But when I am trying to standardise this monitoring with a pattern to avoid pushing the configs each time, it did not work. Can you let me know where its going wrong?? [monitor://\\azwvocasp00005\PRDC_DeviceLogs\DeviceLogs] disabled = 0 recursive = true sourcetype = Vocollect:DeviceLog index = rpl_winos_application_prod Now am trying: [monitor://\\azwvocasp000*\*DC_DeviceLogs\DeviceLogs] disabled = 0 recursive = true sourcetype = Vocollect:DeviceLog index = rpl_winos_application_prod Thanks in Advance 🙂   ... View more