Forums: SplunkAdministration: Splunk to monitor a directory size change(fschange)

Previous Topic: CSV files with headers.  |   Next Topic: Splunk to monitor Oracle logs


Posts 1–1 of 1  |  Post to this topic
1
subhanjan's Mugshot posted by: subhanjan  |  posts
date: June 6, 2009
permalink

Hi,
Please let me know how to configure to monitor the directory size change.Actually I am unable to understand which inputs.conf to edit.I have edited the /opt/splunk/etc/system/local/inputs.conf added the following entry

[monitor:///test/]
disabled = false
host = localhost.localdomain

The directory is /test which I want to monitor and restarted the splunk.
I am unable to see any errors on local audit.log.

In my centralized splunk server getting no logs from the mentioned server

Post to this topic

You must be logged in to post a reply.