SMB/CIFS
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Contents
SMB/CIFS
Splunk will read and index SMB-mounted files. Mount them read-only to prevent accidental overwriting. Then configure your Splunk Server to add the files or directories as data inputs.
External Links
This documentation applies to the following versions of Splunk: 2.1 , 2.2 , 2.2.1 , 2.2.3 , 2.2.6 View the Article History for its revisions.