my direcotry structur :
A) If I'am putting the Fullpath "for example /data/A/logs/" to the monitor field it works fine
According to the Documentation :
wich is fine for me, anyway I tried it also with the [...] ( /data/.../logs) witch would be also fine for me but that doesn't work either.
Q : Any Idea what I'am doing wrong ?
Universalforwarder : 4.2.3
asked 24 Aug '11, 05:05
I think you'll find a very detailed explanation here ... Regex's and Windows paths in inputs.conf and props.conf on Splunk Answers
answered 24 Aug '11, 10:29