Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to not index certain messages from splunkd on the fwd servers

$
0
0
I am trying to minimize the amount of apps I have by putting paths into inputs.conf that may or may not exist on all hosts in the serverclass. I am getting a ton of the following: 12-18-2015 16:58:33.907 +0000 WARN FilesystemChangeWatcher - error getting attributes of path "e:\Directory": The device is not ready. I realize that this is legit but how can I make it so splunk does not index these events?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>