Does ignoreOlderThan
stanza in inputs.conf is Invalid for batch input?
I am getting error as-"Invalid key in stanza"
[batch:\\D:\...\*.zip]
move_policy = sinkhole
index=abc
ignoreOlderThan = 72h
correct, it is valid for `[monitor:// .... ] only
https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Inputsconf
see here the relevant attributes for batch:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Inputsconf#BATCH_.28.22Upload_a_file.22_in_...
hope it helps