Getting Data In

Dynamic lookup file name in Transforms.conf

sscandoit
Explorer

Hi,

We have a cron job which periodically updates the lookup file. The file name is of the format lookup_mmddyyyy.csv where mmddyyyy is date on which the file is generated. Currently I manually change the file name to lookup.csv since the transforms.conf has following:

[AppLogLookup]

case_sensitive_match=false

filename=lookup.csv

Is there any way I give the name with date? for e.g.

[AppLogLookup]

case_sensitive_match=false

filename=lookup_mmddyyyy.csv

Appreciate all the help.

Thanks,
Suvelee

Tags (2)
1 Solution

Linegod
Path Finder

If it were me, I would symbolically link the 'lookup.csv' to your updated lookup_mmddyyy.csv' when you create it to make it work.

View solution in original post

0 Karma

Linegod
Path Finder

If it were me, I would symbolically link the 'lookup.csv' to your updated lookup_mmddyyy.csv' when you create it to make it work.

0 Karma

sscandoit
Explorer

Thanks a lot. That's an easy solution.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...