How can I watch a CSV file?

[daniel333]

All,

I have a CSV being laid to a file system by a database.

A basic monitor stanza brought the file in perfect with sourctype=csv. However, when a new file is loaded with the same name, Splunk does not bring in the file with the new contents. Any idea on how to get Splunk to reread the file?

[daniel333 · Accepted solution]

Not sure why but a forwarder restart solved this. Just worked.