Getting Data In

Folder Monitoring

diegosainz
Path Finder

I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advice for the Inputs config would be appreciated.

Tags (2)
0 Karma

stefandagerman
Path Finder

Anything in here missing to answer your question? http://docs.splunk.com/Documentation/Splunk/latest/Data/Configureyourinputs

Splunk does not do 'timed' monitoring. It can monitor your folder and pick up any *.msg file when it appears/changes. If you need to make sure that data is only indexed every 15 minutes (use-case?), setup a cronjob that copies the file "on the quarter hour" into the folder monitored by splunk and consider using a batch input, if your file size justifies it.

Get Updates on the Splunk Community!

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...