Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Problem to index the entire csv file

$
0
0
we use csv to track app's performance. I added the csv to forwarder and keep monitoring it. The problem is that while app is running and keeping writing to the csv, however, only the few minutes at the beginning will be indexed but not the rest. If moved the whole file, while no more update, to another location, I can get everything indexed. Any suggestions? inputs.conf [monitor:../logs/performance.csv] blacklist = -\d index = test sourcetype = csv crcSalt = &ltSOURCE&gt

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>