Splunk · Schema

MonitorInputCreateRequest

AnalyticsData AnalysisLoggingMachine DataMonitoringObservabilityPlatformSecuritySIEM

Name	Type	Description
name	string	The file or directory path to monitor
index	string	Destination index
sourcetype	string	Source type to assign
source	string	Source value to assign
host	string	Host value to assign
disabled	boolean	Whether to create the input in disabled state
followTail	boolean	Start monitoring from end of file
recursive	boolean	Recursively monitor subdirectories
whitelist	string	Regex pattern for files to include
blacklist	string	Regex pattern for files to exclude