From server1, I have access to the desired UNC path, and this same user is running splunk, so I know access is not an issue.
\etc\apps\search\local\inputs.conf
[monitor://\\SANCIFS_TDC_NETAPP01A.SAN.MyCompany.Com\CIFS_COGNOS$\Test\Logs]
disabled = false
host = sancifs_test
index = default
sourcetype = motio_test
I have tried many different permutations of the forward and back slash for my monitor stanza, but nothing has worked so far.
What am I doing wrong?
Thanks, Sean