I have universal forwarder 4.2.4 installed on a Windows 2008 server. I have it monitoring several directories, but I want to blacklist a single subdirectory, so all files in that subdirectory are ignored. I've tried the following in the inputs.conf file, but files in the subdirectory continue to be processed.
[monitor:///$WINDIR\MyDirectory]
blacklist = MySubDirectory
[monitor:///$WINDIR\MyDirectory]
blacklist = \MySubDirectory
[monitor:///$WINDIR\MyDirectory]
blacklist = \MySubDirectory\
[monitor:///$WINDIR\MyDirectory]
blacklist = \MySubDirectory\*
[monitor:///$WINDIR\MyDirectory]
blacklist = \\MySubDirectory
[monitor:///$WINDIR\MyDirectory]
blacklist = \\MySubDirectory\\
[monitor:///$WINDIR\MyDirectory]
blacklist = \\MySubDirectory\\*
[monitor:///$WINDIR\MyDirectory]
blacklist = /MySubDirectory
[monitor:///$WINDIR\MyDirectory]
blacklist = /MySubDirectory/
[monitor:///$WINDIR\MyDirectory]
blacklist = /MySubDirectory/*
and several other variations. I'm sure I'm missing something obvious. Thanks for the help.
... View more