FSChange - local
Splunk can be configured to monitor changes to your local file system as they occur. To do this, edit
inputs.conf and enable the
fschange scripted input. Once configured, Splunk will dutifully monitor any and all changes to the file system you specify.
More information on how to enable and configure the
fschange input can be found at "Monitor changes to your filesystem" in this manual.
Unix logs - local
WebSphere - local
This documentation applies to the following versions of Splunk® Enterprise: 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7