Hi experts,

We have got this problem when using Sentinel 7.4.1 to get event from a flat file.

Collector: NetIQ Universal Event
Connector: File Connect

The "file" event source contains several lines of data, say:

Line A Data, xxx, xxx
Line B Data, xxx, xxx

And there comes 2 events in Sentinel, which is normal:

Event: Line A Data, xxx, xxx
Event: Line B Data, xxx, xxx

Later when there is one more line (Line C) of data added to the file, the file becomes to:

Line A Data, xxx, xxx
Line B Data, xxx, xxx
(Newly Added!) Line C Data, xxx, xxx

Now there come 3 new events (instead of only one) which make the total number of events to 5:

Event: Line A Data, xxx, xxx
(New!) Event: Line A Data, xxx, xxx
Event: Line B Data, xxx, xxx
(New!) Event: Line B Data, xxx, xxx
(New!) Event: Line C Data, xxx, xxx

But what we actually expected is that ONLY ONE new event being collected, and which should be correspondent to the newly added line of data in the flat file:

Line A Data, xxx, xxx
Line B Data, xxx, xxx
(New!) Line C Data, xxx, xxx

We have tried setting the connector to "Always start from end of data", but it did not change the result.

So, could someone please guide us how to make the collector/connector only crawls the incremental line of data of the flat text file as new event(s)? Thanks a lot.