crawl
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
crawl
Synopsis
Crawls the filesystem for files of interest to Splunk.
Syntax
crawl [crawl-option]*
Arguments
- crawl-option
- Syntax:
- Description:
Description
Crawls for the discovery of new sources to index. Default crawl settings are found in crawl.conf and crawl operations are logged to $splunk_home/var/log/splunk/crawl.log. Generally to be used in conjunction with the input command. Specify crawl options to override settings in crawl.conf. Note: If you add crawl to a search, Splunk only returns data it generates from crawl. Splunk doesn't return any data generated before | crawl.
Examples
Example 1: Crawl root and home directories and add all possible inputs found (adds configuration information to "inputs.conf").
| crawl root="/;/Users/" | input addExample 2: Crawl bob's home directory.
| crawl root=/home/bobExample 3: Add all sources found in bob's home directory to the 'preview' index.
| crawl root=/home/bob | input add index=previewExample 4: Crawl using default settings defined in crawl.conf.
| crawl
See also
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.