I am monitoring couple of files by specifying same source type.
Inputs.conf:-
[monitor://D:\*\*\\Installations\*\Logs\*\XYZ]
sourcetype = abc
index = ******
disabled = false
ignoreOlderThan = 2d
[monitor://D:\*\*\\Installations\*\Logs\*\fgh]
sourcetype = abc
index = ******
disabled = false
ignoreOlderThan = 2d
Now, I need to monitor the same path not individually mentioning the file names by using wildcards. Here I am using different source type.
[monitor://D:\*\*\\Installations\*\Logs\*\*.log]
sourcetype = xyz
index = ******
disabled = false
ignoreOlderThan = 2d
Is this works??
need help
Thanks
↧