Getting Data In

how to monitor windows path

vrmandadi
Builder

Below is the path I am trying to monitor
C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\logs\okta_radius and I used the following monitoring stanza

[monitor://C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\logs\okta_radius]
index = okta
sourcetype = okta_radius

Is this the correct stanza or syntax?

0 Karma
1 Solution

woodcock
Esteemed Legend

That is a perfectly reasonable and fully functional setting.

View solution in original post

0 Karma

woodcock
Esteemed Legend

That is a perfectly reasonable and fully functional setting.

0 Karma

vrmandadi
Builder

Thank you.So it should be an issue with permission .Can we check specifically internal logs to see the error

0 Karma

woodcock
Esteemed Legend

Try this:

index=_* okta_radius (ERROR OR WARN* OR FAIL* OR CANNOT OR TIMEOUT OR CRASH* OR UNABLE)
0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...