There is nothing in Spunk to do that automatically. I suppose you could create an alert to monitor the amount of indexed data for a given day. You'll find several examples on Splunkbase. Then have the alert kick off a script to do whatever you want.
There is nothing in Spunk to do that automatically. I suppose you could create an alert to monitor the amount of indexed data for a given day. You'll find several examples on Splunkbase. Then have the alert kick off a script to do whatever you want.
