Skip to main content
Question

There a way to manually run stream file collector against previously collected files?

  • March 11, 2025
  • 5 replies
  • 3 views

There a way to manually run stream file collector against previously collected files?

5 replies

Raanan Dagan
  • Employee
  • March 11, 2025

As long as that file has not been deleted, or, you enabled the Destructive flag, you can collect the same file multiple times


Raanan Dagan
  • Employee
  • March 11, 2025

0


  • Author
  • Employee
  • March 11, 2025

the collector for file system where it only lets you specifc a directory, will each full manual run gather everything in that directory regardless of having been seen before?


  • Author
  • Employee
  • March 11, 2025

i was getting odd results where i had 2337 event files, some runs would execute and i'd see like 600 events show up in my final destination


Raanan Dagan
  • Employee
  • March 11, 2025

Are you using the ' file monitor' source? or 'file system' collector?as for the 2337 vs 600 events .. will need to do some digging .. it could be some factors like event breakers, pipeline .. etc ..