I had put the csv file in a directory,when I choose the index for indexing I choose "main" but if I go to manager and index in the main there aren't any events,help to find out the reason why there aren't the events indexed.
the version is 5.0.2, in the input.conf:
[monitor:MyDir]
index=MyIndex
sourcetype=csv
where in "myDir" I wrote: c: ...
the index is : test1
I wrote in the sourcetype=csv
I saw in Manager the sofware created automatically the input data file, the path is correct and the files are 2, that's is correct.But If I check the number of events are 0.
... View more