I am monitoring couple of files by specifying same source type.
Inputs.conf:-
[monitor://D:**\Installations*\Logs*\XYZ]
sourcetype = abc
index = ******
disabled = false
ignoreOlderThan = 2d
[monitor://D:**\Installations*\Logs*\fgh]
sourcetype = abc
index = ******
disabled = false
ignoreOlderThan = 2d
Now, I need to monitor the same path not individually mentioning the file names by using wildcards. Here I am using different source type.
[monitor://D:**\Installations*\Logs**.log]
sourcetype = xyz
index = ******
disabled = false
ignoreOlderThan = 2d
Is this works??
need help
Thanks
... View more