Is there a way for logskim to only read a specific log and not pull in and process all logs in the log file directory?
Customer is looking to send only SipEngine.ininlog data to splunk via logskim.

Also, is there a way to keep this running indefinitely? 
The command seems to stop after a few hours, even with the -repeat command set.

Thanks!

Chuck Bailey

The readme has an explanation of how to pass a filter file or folder location with filter files.  The filter file can be created by making a filter in log viewer.  That is the expected format.  So, you should be able to make a filter file for each subsystem and you could make all the logs you don't care about to filter for something that will never match.  I am sorry, I don't have direct access to a test server to play with this right now or I would give you an example command line and like "C:\Logskim\filter" example path to the folder holding the filter files.  

Hope this helps.  If you don't figure it out from this please post and let me know and I'll try to remember to come back to this post.