How do I force splunk to index new files in the directory that is being monitored immediately? sometimes it takes really long for it to detect/index new files.
I have just one folder that splunk is monitoring... and it still doesn't pick up my file.
I have to bounce the forwarder everytime, to make splunk pick up my new files.
Is there a setting somewhere, that i can change, to make splunk monitor my dir more often that is...
Or is there a CLI command that I can issue to force splunk to monitor that dir ?
Splunk Indexer: 4.1.4-82143
Splunk Forwarder:4.0.10-77919
Thanks!
... View more