Quantcast
Channel: Questions in topic: "props.conf"
Viewing all articles
Browse latest Browse all 1485

Escaping backslashes for Windows paths in props.conf

$
0
0
In my props.conf I need a [source::] stanza to override some settings from a [sourcetype] stanza. The source is a file on a Windows server, so I take a look at the [props.conf documentation](https://docs.splunk.com/Documentation/Splunk/8.0.2/Admin/Propsconf#GLOBAL_SETTINGS), and follow these instructions: When you specify Windows-based file paths as part of a [source::] stanza, you must escape any backslashes contained within the specified file path. Example: [source::c:\\path_to\\file.txt] But that seems to be flat out wrong. If I use this: [source::C:\\dir1\\dir2\\app.log] it doesn't match. Change it to: [source::C:\dir1\dir2\app.log] and it matches. Am I missing something obvious, or is the documentation just wrong?

Viewing all articles
Browse latest Browse all 1485

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>