I'm using powershell to get a web page in order to keep track my service status.
I tested my script which can write the whole page into local file without problem.
Then I changed to write it to $SPLUNK_HOME/var/spool/splunk
However, I found from Splunk search it always only captured the first few lines in HTML before the
Can anyone tell there's any setting affecting spool indexing behavior?
Why would you ever write to
$SPLUNK_HOME at all, especially
var? Please point us to splunk docs that describes the way you are using this directory (which so far as I know is for internal use regarding primarily summary indexing).
I thought writing file to spool is the easiest way if I don't want to keep the file after indexing. Ok, seems I shouldn't use without good knowledge.
There is another story about powershell... I initially wanted to get the page through stdin/out. I failed to, so I wrote the html content into file first
Hey @philip_w, did a portion of your post get cut off? This part: "However, I found from Splunk search it always only captured the first few lines in HTML before the" You can edit your post by pressing the gear icon to the top right of the post.