After uninstalling Splunk 4.0.10 and doing a clean install of 4.1.4 proxy logs not recognized:
11-10-2010 08:37:26.603 INFO TailingProcessor - No configurations match, will ignore path='D:\logs\Web\ISALOG_20101005_WEB_000.w3c'.
Inputs.conf:
[monitor://D:\logs\web\*.w3c]
disabled = false
followtail = 1
sourcetype = isa_web
whitelist = \\logs\\*
[monitor://D:\logs\firewall\*.w3c]
disabled = true
followtail = 1
sourcetype = isa_firewall
Whitelist added per http://www.splunk.com/support/forum:SplunkAdministration/4423, but did not help. Actual case of path is D:\LOGS\Web, but changing monitor to match did not help.
The stanza are case sensitive, the "w" of web is different in D:\logs\Web\ISALOG_20101005_WEB_000.w3c and [monitor://D:\logs\web\*.w3c]
to fix, change the stanza to [monitor://D:\logs\Web\*.w3c]