https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-the-same-file-within-a-specified-time/m-p/399402#M71160 <P>One slightly ugly approach is to schedule a scripted input to run every 6 hours. The script can be a few lines of python code that read the file and write it to stdout, which Splunk will index.</P> Wed, 29 May 2019 20:01:48 GMT richgalloway 2019-05-29T20:01:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-the-same-file-within-a-specified-time/m-p/399401#M71159 <P>Good afternoon,</P> <P>It is possible to index the same complete file within a certain period of time.</P> <P>Example: I have a configuration file with approximately 2000 lines and 61kb, I needed to index this file once every 6 hours.</P> <P>Would anyone have any ideas? I tried to make some settings in the file input.conf and props.conf, but all without success.</P> <P>Thanks in advance for your support.</P> Wed, 29 May 2019 19:17:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-the-same-file-within-a-specified-time/m-p/399401#M71159 msilvareal 2019-05-29T19:17:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-the-same-file-within-a-specified-time/m-p/399402#M71160 <P>One slightly ugly approach is to schedule a scripted input to run every 6 hours. The script can be a few lines of python code that read the file and write it to stdout, which Splunk will index.</P> Wed, 29 May 2019 20:01:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-the-same-file-within-a-specified-time/m-p/399402#M71160 richgalloway 2019-05-29T20:01:48Z