|
We have a text file DEFAULT.PFL(which has just 3 lines of text) in all the below paths /usr/sap/IX4/SYS/profile /usr/sap/IXV/SYS/profile /usr/sap/IXD/SYS/profile /usr/sap/IXT/SYS/profile And I am using [monitor:///usr/sap/IX4/SYS/profile] disabled = false sourcetype = IX4webdisp_profile index = erp_webdisp crcSalt = IX4webdisp_profile Similarly I have created monitors for other file paths. Splunk is reading all other files except the DEFAULT.PFL in all the above file paths. I tried to create seperate monitor [monitor:///usr/sap/IX4/SYS/profile/DEFAULT.PFL] but still splunk does not read this file. All file permissions are same. Please let me know how to read this file.. |
|
You should get amrit's script that shows the status of all configured inputs. It should give you some information that you can use for troubleshooting. It's available here: http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/ |
