https://community.splunk.com/t5/All-Apps-and-Add-ons/Alert-for-monitoring-file-sizes/m-p/43099#M2172 <P>You could write a scripted input that calls <CODE>ls -l</CODE> on the monitored directory, and filter the result based on the file size listed.</P> <P>For reference you can take a look at the *NIX app, it contains many scripted inputs that basically call a single command such as ps, df, etc.</P> Thu, 23 May 2013 07:30:52 GMT martin_mueller 2013-05-23T07:30:52Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Alert-for-monitoring-file-sizes/m-p/43098#M2171 <P>I’m new to Splunk and been doing a lot of reading and browsing Splunkbase.<BR /> I am needing to create an Alert to run every 30 minutes to monitor the file size of all the log files in a directory (/u01/app/psoft/logs/ERPRD). </P> <P>These log file names aren’t static as new ones are created when a user runs a query.<BR /> If any of the log files are &gt; 500MB, the Alert will fire an email.</P> <P>Any detailed help or reference links would be appreciated.</P> Wed, 22 May 2013 18:21:43 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Alert-for-monitoring-file-sizes/m-p/43098#M2171 TigerTim 2013-05-22T18:21:43Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Alert-for-monitoring-file-sizes/m-p/43099#M2172 <P>You could write a scripted input that calls <CODE>ls -l</CODE> on the monitored directory, and filter the result based on the file size listed.</P> <P>For reference you can take a look at the *NIX app, it contains many scripted inputs that basically call a single command such as ps, df, etc.</P> Thu, 23 May 2013 07:30:52 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Alert-for-monitoring-file-sizes/m-p/43099#M2172 martin_mueller 2013-05-23T07:30:52Z