https://community.splunk.com/t5/Getting-Data-In/Folder-Monitoring/m-p/94876#M19754 <P>I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advice for the Inputs config would be appreciated.</P> Mon, 15 Apr 2013 18:57:16 GMT diegosainz 2013-04-15T18:57:16Z https://community.splunk.com/t5/Getting-Data-In/Folder-Monitoring/m-p/94876#M19754 <P>I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advice for the Inputs config would be appreciated.</P> Mon, 15 Apr 2013 18:57:16 GMT https://community.splunk.com/t5/Getting-Data-In/Folder-Monitoring/m-p/94876#M19754 diegosainz 2013-04-15T18:57:16Z https://community.splunk.com/t5/Getting-Data-In/Folder-Monitoring/m-p/94877#M19755 <P>Anything in here missing to answer your question? <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Configureyourinputs">http://docs.splunk.com/Documentation/Splunk/latest/Data/Configureyourinputs</A></P> <P>Splunk does not do 'timed' monitoring. It can monitor your folder and pick up any *.msg file when it appears/changes. If you need to make sure that data is only indexed every 15 minutes (use-case?), setup a cronjob that copies the file "on the quarter hour" into the folder monitored by splunk and consider using a batch input, if your file size justifies it. </P> Mon, 15 Apr 2013 20:25:17 GMT https://community.splunk.com/t5/Getting-Data-In/Folder-Monitoring/m-p/94877#M19755 stefandagerman 2013-04-15T20:25:17Z