Hi,
I'm trying to monitor some Apache logs and I can't seem to get the statement correct.
I'm trying to monitor `"access_log.*"` , `"error_log.*"` , access_log, error_log, and the gzs to go with them.
[monitor:///var/log/httpd]
whitelist=(\_log*$|\.log$|\_log*\.gz$)
blacklist= (mod\_jk\.log$|\.gz|catalina\.out$)
recursive = true
sourcetype=access_combined
disabled = 0
index = unix
Can someone point out my error?
↧