I have the monitor stanza on one of my Universal Forwarders.....I tried to blacklist a particular JVM from which the logs are not required to be monitored. Any help would be appreciated on this.
inputs.conf
[monitor:///opt/server/webservers/*/logs/access*.log]
sourcetype=access_logs
blacklist=\/opt\/server\/webservers\/JVM_DEV\/logs\/access*\.log
crcSalt =
index=devint2