I have logs coming to a heavy forwarder being stored under directories based on IPs (i.e. " /var/log/remote/192.168.1.6"
How do I use inputs.conf to capture a range of IPs while setting the index and sourcetype? This doesn't work:
[monitor:///var/log/remote/192.168.1.*/*.log]
host_segment=4
sourcetype=bar
index=foo
↧