Hello! I am pulling in logs from a server, there are about 500 logs in the directory. We want to bring in all 498 of them with a generic sourcetype and two need a specific log type. Is it as easy as this:
[monitor://C:\Program Files\Logs\*]
blacklist = log1:log2
disable=false
index=logs
sourcetype=logs
[monitor://C:\Program Files\Logs\*]
whitelist = log1:log2
disable=false
index=logs
sourcetype=specific:logs
