Getting Data In

How can I watch a CSV file?

Builder

All,

I have a CSV being laid to a file system by a database.

A basic monitor stanza brought the file in perfect with sourctype=csv. However, when a new file is loaded with the same name, Splunk does not bring in the file with the new contents. Any idea on how to get Splunk to reread the file?

Tags (2)
0 Karma
1 Solution

Builder

Not sure why but a forwarder restart solved this. Just worked.

View solution in original post

0 Karma

Builder

Not sure why but a forwarder restart solved this. Just worked.

View solution in original post

0 Karma