<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221631#M43501</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I would like to monitor a file that is generated by a script. The script is run daily and the results can be the same for many days in a row. Splunk doesn't seem to take consecutive results if they are the same. &lt;/P&gt;

&lt;P&gt;Is there any way I can force Splunk to index data daily each time a new file is generated. The only thing changing from one file to the other is the "modified date" while the rest is the same (file name,content, etc..). I don't mind having the same data many times on different dates.&lt;/P&gt;

&lt;P&gt;Thank you.&lt;BR /&gt;
Regards,&lt;BR /&gt;
David&lt;/P&gt;</description>
    <pubDate>Fri, 17 Jun 2016 12:42:01 GMT</pubDate>
    <dc:creator>DavidHourani</dc:creator>
    <dc:date>2016-06-17T12:42:01Z</dc:date>
    <item>
      <title>How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221631#M43501</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I would like to monitor a file that is generated by a script. The script is run daily and the results can be the same for many days in a row. Splunk doesn't seem to take consecutive results if they are the same. &lt;/P&gt;

&lt;P&gt;Is there any way I can force Splunk to index data daily each time a new file is generated. The only thing changing from one file to the other is the "modified date" while the rest is the same (file name,content, etc..). I don't mind having the same data many times on different dates.&lt;/P&gt;

&lt;P&gt;Thank you.&lt;BR /&gt;
Regards,&lt;BR /&gt;
David&lt;/P&gt;</description>
      <pubDate>Fri, 17 Jun 2016 12:42:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221631#M43501</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2016-06-17T12:42:01Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221632#M43502</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;One trick that you can do is make a script to print the ouput of the file and index the output, with current time&lt;/P&gt;

&lt;P&gt;Hope i help you&lt;/P&gt;</description>
      <pubDate>Fri, 17 Jun 2016 12:56:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221632#M43502</guid>
      <dc:creator>jmallorquin</dc:creator>
      <dc:date>2016-06-17T12:56:16Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221633#M43503</link>
      <description>&lt;P&gt;As per &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf"&gt;inputs.conf&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/1492i55D3356CE15021D5/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;-- Must be in the range 256-1048576.&lt;/P&gt;

&lt;P&gt;So, you need to ensure that something is different in the first 256 bytes (unless you change the default). Adding the date or a random number.&lt;/P&gt;</description>
      <pubDate>Fri, 17 Jun 2016 14:03:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221633#M43503</guid>
      <dc:creator>ddrillic</dc:creator>
      <dc:date>2016-06-17T14:03:22Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221634#M43504</link>
      <description>&lt;P&gt;smart plan &lt;span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:"&gt;😄&lt;/span&gt; i was looking for something more like CRCsalt=  ..don't know if that exists..&lt;/P&gt;</description>
      <pubDate>Fri, 17 Jun 2016 16:35:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221634#M43504</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2016-06-17T16:35:34Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221635#M43505</link>
      <description>&lt;P&gt;my entire file is the same daily &lt;span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:"&gt;😄&lt;/span&gt; any solution with something like CRCsalt=  ?&lt;/P&gt;</description>
      <pubDate>Fri, 17 Jun 2016 16:36:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221635#M43505</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2016-06-17T16:36:01Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221636#M43506</link>
      <description>&lt;P&gt;No for this time sorry.&lt;/P&gt;</description>
      <pubDate>Mon, 20 Jun 2016 07:34:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221636#M43506</guid>
      <dc:creator>jmallorquin</dc:creator>
      <dc:date>2016-06-20T07:34:52Z</dc:date>
    </item>
    <item>
      <title>Re: How to configure Splunk to monitor and index a file that is generated by a script daily, even if there is no change?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221637#M43507</link>
      <description>&lt;P&gt;Thank you jmallorquin&lt;/P&gt;</description>
      <pubDate>Wed, 03 Aug 2016 09:59:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-configure-Splunk-to-monitor-and-index-a-file-that-is/m-p/221637#M43507</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2016-08-03T09:59:22Z</dc:date>
    </item>
  </channel>
</rss>

