All,
I want to monitor Apache log and file name is appended with date, so it's dynamic file. eg,
Log directory:
/var/apache/logs/
File name is,
apache_log.2014.02.20
apache_log.2014.02.19
apache_log.2014.02.18
apache_log.2014.02.17.gz
apache_log.2014.02.16.gz
Running log is coming into apache_log.2014.02.20 and I also want to ignore all the files with *.gz name, since old files are getting archived and present into same directory (/var/apache/logs/).
Please some one can give details about stanza of input.conf and other details if required.
Yes, Thankx
Note that the file is called "inputs.conf", not input.conf.
Name your index and sourcetype - the latter likely to access_combined
, or access_common
[monitor:///var/apache/log/apache_log*]
index = your_index
sourcetype = your_sourcetype
blacklist = \.gz
/K
you can add some more information to the monitor path (like above), or define a whitelist as well, which should amount to the same thing. See;
/K
Thankx Kristain,
"/var/apache/log/" also contains different logs such as Mod_jk, error, ssl logs, so i want to specify something like that, Monitor should able to read file only with name of apache_log.