Sorry it has taken me a while to respond to this. Been very busy on another project just got back to this today.
The only entiries in my Splunkd.log are as follows
05-30-2018 11:52:38.167 -0400 INFO TailingProcessor - Parsing configuration stanza: monitor://e:\WebLogs\*.log.
05-30-2018 11:52:38.167 -0400 INFO TailingProcessor - Adding watch on path: e:\WebLogs.
I think these are both good
Right now my SplunkForwarder Service is running under the Local System account. I haven't been able to figure out how to give that account READ permisssions to the e:\weblogs folder.
... View more