Getting Data In

How to assure data arrived from script/web server

nirt
Path Finder

Hi,
I have a scheduled data input script in Splunk which runs every hour, the script is a basic wget from a web server, sometimes that web server is not responding well and causing us to lose data of an hour.
Is there any way to check if data has arrived and if not re-run the script? or any other more efficent way to retreive data from the web server?
the reason why we have this on an hourly cron is that the data only changes once an hour, and I have noticed that when we run it multiple times we get duplicate data in our searches(maybe there is a way to overcome this?)

Thanks in advance

Tags (1)
0 Karma

Ayn
Legend

The best option in my opinion is to build this logic into the script instead.

martin_mueller
SplunkTrust
SplunkTrust

You could run a scheduled search every hour to alert you whenever there is no/not enough data in the previous hour.

0 Karma

nirt
Path Finder

I thought about that but I wanted some more generic/automatic option.. the alert can trigger the script and then it will populate the data - that should work right?
Is there any more basic way to do it? it seems like some workaround

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...