Kindly guide me how to get this share folder to be monitored in splunk. CSV files can be used to transfer data from another system or application into Splunk, when other methods of data exchange like syslog or an API are not available or are not suitable. Sourcetype = powerfile:power:osbd_terminateduser In Server01 we have splunk UF agent running and nf configured for monitoring the log files present in the server.Ĭan we use the same app which is present in the server01 to monitor the file present in the server02 as it has the required permission to access the file from that server. Conf file provides the most configuration options for setting up a file monitor input. Published Follow Hurricane Labs Splunk Admin Stuart. Once set up, your data input configuration is easy to monitor in. Ingesting a CSV file into Splunk Hurricane Labs Managed Splunk and Security Services for your businesss unique use case. monitor:///tmp/headerfile.txt indexheaderfile sourcetypeheader. \\fileshare\power\Powerfile\TO\IAM\Export Files\OSBD - Terminated Users List.csv - Location of the file to be monitored in splunk.Ībove mentioned path has required permission to access the file from the share drive Splunk Web The CLI conf Using either the CLI or inputs. First of all set the nf in UF and here add the sourcetype and index name. AboutPressCopyrightContact usCreatorsAdvertiseDevelopersTermsPrivacyPolicy
0 Comments
Leave a Reply. |