Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Is it possible to use regex in an inputs.conf monitor stanza?

$
0
0
Hi Is it possible to do something like this: [MONITOR:///some directory/WE\d{8}.log] for indexing the following filenames: WE93820493.log WE37245293.log I don't want to index the following filename: WE93820493corrupt.log and WE37245293test.log which are indexed with this inputs.conf: [MONITOR:///some directory/WE*.log] If it is not possible, is there a way to setup my stanza so I get a similar behavior? Thanks,

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>