An inputs.conf entry:
[monitor:///opt/atlassian/.../*.log]
sourcetype=atlassian
crcSalt = SOURCE (pretend there are brackets around SOURCE)
It's processing files in /opt/atlassian/fisheye-data/var/cache (I know this because there are messages in the splunk log re files in the cache dir.) but appears to be completely skipping files in the log directory. /opt/atlassian/fisheye-data/var/log
Help! 🙂
Thanks.
Disregard. It's working now. Apparently I'm lacking in patience.