topic How to sync csv file with splunk and how to update splunk automatically when there is change in csv file ? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309707#M96005 <P>csv file should be synced with splunk so that next time I changed the data in csv file, it should reflect automatically in splunk</P> Wed, 24 May 2017 07:15:47 GMT nik2894 2017-05-24T07:15:47Z How to sync csv file with splunk and how to update splunk automatically when there is change in csv file ? https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309707#M96005 <P>csv file should be synced with splunk so that next time I changed the data in csv file, it should reflect automatically in splunk</P> Wed, 24 May 2017 07:15:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309707#M96005 nik2894 2017-05-24T07:15:47Z Re: How to sync csv file with splunk and how to update splunk automatically when there is change in csv file ? https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309708#M96006 <P>how about using the monitor stanza to monitor that csv file?<BR /> docs:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.0/Data/Extractfieldsfromfileswithstructureddata">http://docs.splunk.com/Documentation/Splunk/6.6.0/Data/Extractfieldsfromfileswithstructureddata</A><BR /> answers (there are plenty):<BR /> <A href="https://answers.splunk.com/answers/29418/step-by-step-adding-a-new-csv-datasource.html">https://answers.splunk.com/answers/29418/step-by-step-adding-a-new-csv-datasource.html</A></P> Wed, 24 May 2017 13:48:39 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309708#M96006 adonio 2017-05-24T13:48:39Z Re: How to sync csv file with splunk and how to update splunk automatically when there is change in csv file ? https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309709#M96007 <P>Create a <CODE>Lookup file</CODE> on your search head and then link to this file by creating a <CODE>Lookup table</CODE>. Then, using the CLI on your Search Head, use <CODE>soft link</CODE> or <CODE>rsysnc</CODE> or other method, create your automatic synchronization of the files such that when the source file is updated, the <CODE>Lookup file</CODE> on the Search Head is also updated. You can also put a <CODE>Deployment Server</CODE> in the middle.</P> Wed, 24 May 2017 14:27:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-sync-csv-file-with-splunk-and-how-to-update-splunk/m-p/309709#M96007 woodcock 2017-05-24T14:27:28Z