crawl
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10
crawl
Synopsis
Crawls the filesystem for files of interest to Splunk.
Syntax
crawl [crawl-option]*
Arguments
- crawl-option
- Syntax:
- Description:
Description
Crawls for the discovery of new sources to index. Default crawl settings are found in crawl.conf and crawl operations are logged to $splunk_home/var/log/splunk/crawl.log. Generally to be used in conjunction with the input command. Specify crawl options to override settings in crawl.conf. Note: If you add crawl to a search, Splunk only returns data it generates from crawl. Splunk doesn't return any data generated before | crawl.
Examples
Example 1: Crawl root and home directories and add all possible inputs found (adds configuration information to "inputs.conf").
| crawl root="/;/Users/" | input add
Example 2: Crawl bob's home directory.
| crawl root=/home/bobExample 3: Add all sources found in bob's home directory to the 'preview' index.
| crawl root=/home/bob | input add index=previewExample 4: Crawl using default settings defined in crawl.conf.
| crawl