Hi there,
Would someone tell me if I can disable atime update for logs monitored by a universal forwarder?
Even though atime is not being updated, can the forwarder correctly monitor and splunk the logs?
Thanks
↧
Does atime (file access time) need to be up-to-date for the universal forwarder to monitor a file?
↧