Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Inputs.conf whitelist syntax assistance

$
0
0

I have several virtual hosts under /opt/log/

/opt/log/webA
/opt/log/webB
/opt/log/webC

They all have denied.log that I need to index, would this be correct inputs.conf?

[monitor:///opt/log/www*]
sourcetype = apache
index=www
host_segment=3
whitelist = denied\.log$


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>