Splunk Search

How to scan log files

cppandey80
New Member

I have log files which are in below format , I would like to scan them.
When one logs reached to its size limit then new log file is created.

console_Server1_1.log
console_Server1_2.log
console_Server1_3.log
console_Server1_4.log
console_Server1_n.log

On Other servers these files are like

console_Server2_1.log
console_Server2_2.log
console_Server2_3.log
console_Server2_4.log
console_Server2_n.log

but in the same folder, there are other files too, which I don't like to scan.
e.g.

console_server1_2016_08_19@23_11_32.log

Any leads?

Tags (1)
0 Karma

TStrauch
Communicator

Hi cppandey80,

in the monitor stanza of your inputs.conf you can use Regular Expressions and Wildcards, for defining file paths.

Just take a look at this and i think you will find your solution.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Data/Specifyinputpathswithwildcards

regards

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...