I have a python script with runs daily and saves output in csv file
for example: if i run that script today it will get the data from april 1st to today date(04/21/2021) and if i run tomorrow it will get the data from april 1st to tomorrow date (04/22/2021) and with different file name every time we run
i want to onboard this data into splunk with out duplicate data
how can we do that?
we have a field name called start_time this field we are taking as time field
for example: start_time field value = 04/21/2021 10.30
example: start_time field value = 04/22/2021 10.30