So are you saying that I need to add the monitor first without specifying the index, and then manually edit the inputs.conf file? Also, which file is it? find . -type f -name inputs.conf ./etc/system/default/inputs.conf ./etc/apps/SplunkUniversalForwarder/default/inputs.conf ./etc/apps/SplunkLightForwarder/default/inputs.conf ./etc/apps/SplunkDeploymentMonitor/local/inputs.conf ./etc/apps/sample_app/default/inputs.conf ./etc/apps/search/local/inputs.conf ./etc/modules/distributedDeployment/classes/deployable/inputs.conf ... View more