Hello Everyone!
I created an inputs.conf for index different files, but after a few files indexed it stop indexing new incoming files. For the record the files are historical.
What could be going wrong?
This is my config:
[monitor:/data01/reports-splunk]
disabled = 0
index = racf
sourcetype = Zsecure
↧