<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic how to extract data on hourly basis in Windows platform in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/how-to-extract-data-on-hourly-basis-in-Windows-platform/m-p/70429#M180703</link>
    <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;My Scenario is to fetch data from my local directory(Windows OS) into Splunk on hourly basis, if the file is placed then Splunk had to identify the file and extract the data. And want to automate the process, please help me.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Pramod&lt;/P&gt;</description>
    <pubDate>Fri, 21 Dec 2012 09:24:24 GMT</pubDate>
    <dc:creator>pramodkumar</dc:creator>
    <dc:date>2012-12-21T09:24:24Z</dc:date>
    <item>
      <title>how to extract data on hourly basis in Windows platform</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-extract-data-on-hourly-basis-in-Windows-platform/m-p/70429#M180703</link>
      <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;My Scenario is to fetch data from my local directory(Windows OS) into Splunk on hourly basis, if the file is placed then Splunk had to identify the file and extract the data. And want to automate the process, please help me.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Pramod&lt;/P&gt;</description>
      <pubDate>Fri, 21 Dec 2012 09:24:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-extract-data-on-hourly-basis-in-Windows-platform/m-p/70429#M180703</guid>
      <dc:creator>pramodkumar</dc:creator>
      <dc:date>2012-12-21T09:24:24Z</dc:date>
    </item>
    <item>
      <title>Re: how to extract data on hourly basis in Windows platform</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-extract-data-on-hourly-basis-in-Windows-platform/m-p/70430#M180704</link>
      <description>&lt;P&gt;create/edit a file called &lt;CODE&gt;inputs.conf&lt;/CODE&gt; in &lt;CODE&gt;c:\program files\splunk\etc\system\local&lt;/CODE&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[monitor://c:\path\dir]
index=blah
sourcetype=blah
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Any file that gets put into the directory will be automatically indexed, and continually monitored for new additions. If your files are updated, splunk will see that almost immediately and index the new events. &lt;/P&gt;

&lt;P&gt;For more information, see the Getting Data In section of the manual.&lt;/P&gt;

&lt;P&gt;Hope this helps,&lt;/P&gt;

&lt;P&gt;Kristian&lt;/P&gt;</description>
      <pubDate>Fri, 21 Dec 2012 14:09:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-extract-data-on-hourly-basis-in-Windows-platform/m-p/70430#M180704</guid>
      <dc:creator>kristian_kolb</dc:creator>
      <dc:date>2012-12-21T14:09:05Z</dc:date>
    </item>
  </channel>
</rss>

