file system change monitor

noun

A specific kind of data input designed to track change to your filesystem. The file system change monitor watches any directory you specify and generates an event in Splunk when that directory undergoes any change.

Related forms

For more information

In the Getting Data In Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time