Getting Data In

Monitoring FIles from Diretories

mathiasy123
Path Finder

Why my files that read from directories not showing the event?

mathiasy123_0-1593424618982.png

 

Labels (3)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @mathiasy123 ,

could you share your inputs.conf?

check if there are other inputs.conf's stanzas that monitor the same folder with a different sourcetype or index because Splunk index files once.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @mathiasy123 ,

could you share your inputs.conf?

check if there are other inputs.conf's stanzas that monitor the same folder with a different sourcetype or index because Splunk index files once.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...