https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572657#M101334 <P>What is the difference between using Spool vs OneShot CLI commands? &nbsp; Unfortunately I'm unable to install UFs or directly poll the logs and need to index tar.gz. &nbsp; Is there a performance benefit? &nbsp;Does using spool allow the indexer Splunk server to index the data in the background?</P> Wed, 27 Oct 2021 14:18:24 GMT ebwong 2021-10-27T14:18:24Z https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572657#M101334 <P>What is the difference between using Spool vs OneShot CLI commands? &nbsp; Unfortunately I'm unable to install UFs or directly poll the logs and need to index tar.gz. &nbsp; Is there a performance benefit? &nbsp;Does using spool allow the indexer Splunk server to index the data in the background?</P> Wed, 27 Oct 2021 14:18:24 GMT https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572657#M101334 ebwong 2021-10-27T14:18:24Z https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572690#M101344 <P>Hi</P><P>Those are described here&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/MonitorfilesanddirectoriesusingtheCLI" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/MonitorfilesanddirectoriesusingtheCLI</A></P><P>check also this&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/Monitorfilesanddirectories" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/Monitorfilesanddirectories</A></P><P>r. Ismo</P> Wed, 27 Oct 2021 15:51:51 GMT https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572690#M101344 isoutamo 2021-10-27T15:51:51Z https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572723#M101345 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410">@isoutamo</a>&nbsp;Thanks for the links to documentation, I'm still not entirely sure in what cases one is better than the other.</P> Wed, 27 Oct 2021 18:18:31 GMT https://community.splunk.com/t5/Getting-Data-In/Spool-vs-OneShot/m-p/572723#M101345 ebwong 2021-10-27T18:18:31Z