I have log files which are in below format , I would like to scan them.
When one logs reached to its size limit then new log file is created.
console_Server1_1.log
console_Server1_2.log
console_Server1_3.log
console_Server1_4.log
console_Server1_n.log
On Other servers these files are like
console_Server2_1.log
console_Server2_2.log
console_Server2_3.log
console_Server2_4.log
console_Server2_n.log
but in the same folder, there are other files too, which I don't like to scan.
e.g.
console_server1_2016_08_19@23_11_32.log
Any leads?
Hi cppandey80,
in the monitor stanza of your inputs.conf you can use Regular Expressions and Wildcards, for defining file paths.
Just take a look at this and i think you will find your solution.
http://docs.splunk.com/Documentation/Splunk/6.4.3/Data/Specifyinputpathswithwildcards
regards