Hi,
I have a series of Particular file types in a Direcotry of Directories, I tried to index them with monitor on
Am I missing anything obvious here?
Is there any parameter, I should enable to get this going?
Is it a bug with Splunk which i couldn't find in Known issues?
Regards
Anirudh
You should be using this for your path-to-file:
C:\ABC\...\*.txt
If you are, then it is likely that the files contain identical content in important sections and have the same CRC so are being interpreted as the same file (only forward it once):
http://docs.splunk.com/Documentation/Splunk/latest/Data/Howlogfilerotationishandled
You can Salt with the filename with crcSalt=
so this will not happen.