Getting Data In

Monitoring deploymentclient.conf in etc\system

Path Finder

Is it possible to monitor the folder in etc/system which consists the deployment client ip thru windows app/add-on.

I tried this but not working.

[monitor://C:\Program Files\SplunkUniversalForwarder\etc\system\local\deploymentclient.conf]
disabled = 0
interval = 60
sourcetype = DSIP
index = perfmon

0 Karma

Splunk Employee
Splunk Employee

Hi krishnab,

Could you please share with us what you're trying to do with the deployment server's IP? There are a number of ways to achieve this without having to monitor the file for ingestion!

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!