Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

File Forwarder advanced settings

You can use the following advanced settings to fine tune File Forwarder sources.

File Forwarder advanced settings

Parameter Default value Description
File stale duration (minutes) 1440 In Continuous mode, how many minutes to keep monitoring a file that has not changed, before dropping it. The default value is one day. Select zero to keep monitoring files indefinitely.
Scan folder interval (seconds) 300 How often to scan the folder when File Monitor Type is Folder Scanning.
File parser
  • One line per event
  • Multiple lines per event
How to read lines in the files.
Filter to accept lines   How many lines a mask or filter accepts lines to process. You can select * (many chars) ? (one char), # (a number), or a regex.
Multiple lines per event
  • Filter to start a multiline block
  A mask or filter finds the first line to process in multilink. You can select * (many chars) ? (one char), # (a number), or a regex.
  • Filter to end a multiline block
  A mask or filter finds the last line to process in multiline. You can select * (many chars) ? (one char), # (a number), or a regex.
  • Include the start and end lines of a multiline block
  You can include or exclude the first (header) and last (footer) lines of a block.
  • BlockTrimLines
  Trims the lines before adding to the block separated by a space.
File
  • Filename pattern
  A mask or filter to categorize files into this file class. You can select * (many chars) ? (one char), # (a number), or a regex.
  • File_format
  The AgentLogFormat payload header field. If you don't want to include this field, leave the value empty.
  • File_fldList
  The CSV fields to include in the payload. Use #FIELDS to grab first line in the file that starts with #Fields. Use #HDL_LINES to grab the list of fields from file header.
  • File_fldListPrefix
  The field list line prefix.
  • File_fldListSep
  The field list separator handles \t, XML, KEYED (CSV), or NCSA.