I have an application writing multiple log files per day - the files are very similar to each other. The file naming convention is logfile_MM-DD-YYYY_hh-mm.log (e.g. logfile_06-12-2025-11-47.log).  My universal forwarder is set up like this: [monitor://E:\path\logfile*.log] disabled = 0 crcSalt = <SOURCE> index = XXXX sourcetype = XXXX _meta = env::prod-new The first log file of the day is searchable in Splunk, but every file after that is not visible. I have tried using logfile_*.log as the file name. I have also tried without the crcSalt command, but I'm not seeing any difference.  Any suggestions? ... View more