Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

What is the most efficient way to define directory inputs?

$
0
0
Right now I'm using this for inputs: [monitor://\\share-server\PROD\APP\APPDIR1\log\...\*.log] stuff = true [monitor://\\share-server\PROD\APP\APPDIR2\log\...\*.log] stuff = true [monitor://\\share-server\PROD\APP\APPDIR3\log\...\*.log] stuff = true Would this be better in any way? Worse? The same? [monitor://\\share-server\PROD\APP\...\log\...\*.log] stuff = true whitelist = APPDIR1|APPDIR2|APPDIR3

Viewing all articles
Browse latest Browse all 47296

Trending Articles