Getting Data In

Folder Monitoring

diegosainz
Path Finder

I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advice for the Inputs config would be appreciated.

Tags (2)
0 Karma

stefandagerman
Path Finder

Anything in here missing to answer your question? http://docs.splunk.com/Documentation/Splunk/latest/Data/Configureyourinputs

Splunk does not do 'timed' monitoring. It can monitor your folder and pick up any *.msg file when it appears/changes. If you need to make sure that data is only indexed every 15 minutes (use-case?), setup a cronjob that copies the file "on the quarter hour" into the folder monitored by splunk and consider using a batch input, if your file size justifies it.

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...