https://community.splunk.com/t5/Alerting/Result-files-disappearing/m-p/28526#M249 <P>Hi,</P> <P>I am creating a splunk alert trigger script which parses the output csv file. I am having a problem because the result file keeps disappearing. The trigger passes in the full path to csv file as one of the parameters. Sometimes my script is fast enough to read the file before it disappears, and sometimes it results in file not found. Why is that happening?</P> <PRE> C://Program Files//Splunk//var//run//splunk//dispatch//rt_scheduler__admin__search__RMD5d51449b036e37dfe_at_1367973103_9662.290//results.csv.gz </PRE> <P>Thanks</P> Wed, 08 May 2013 23:36:19 GMT lain179 2013-05-08T23:36:19Z https://community.splunk.com/t5/Alerting/Result-files-disappearing/m-p/28526#M249 <P>Hi,</P> <P>I am creating a splunk alert trigger script which parses the output csv file. I am having a problem because the result file keeps disappearing. The trigger passes in the full path to csv file as one of the parameters. Sometimes my script is fast enough to read the file before it disappears, and sometimes it results in file not found. Why is that happening?</P> <PRE> C://Program Files//Splunk//var//run//splunk//dispatch//rt_scheduler__admin__search__RMD5d51449b036e37dfe_at_1367973103_9662.290//results.csv.gz </PRE> <P>Thanks</P> Wed, 08 May 2013 23:36:19 GMT https://community.splunk.com/t5/Alerting/Result-files-disappearing/m-p/28526#M249 lain179 2013-05-08T23:36:19Z https://community.splunk.com/t5/Alerting/Result-files-disappearing/m-p/28527#M250 <P>You might want to try the following option in your saved search definition:</P> <P>dispatch.ttl = <INTEGER>[p]<BR /> * Indicates the time to live (in seconds) for the artifacts of the scheduled search, if no <BR /> actions are triggered.</INTEGER></P> <P>Hope it will help.</P> <P>Regards,<BR /> Olivier</P> Thu, 09 May 2013 06:25:34 GMT https://community.splunk.com/t5/Alerting/Result-files-disappearing/m-p/28527#M250 OL 2013-05-09T06:25:34Z