Getting Data In

How to index zero byte files where the information is found in the name of the file?

pedromvieira
Communicator

How to index zero byte files?
For some reason, a customer created a monitoring file that only contains information on the filename.

Ex:

abx_20160627_exit.ok

I'd like to index the timestamp on the filename and the "type" (exit).

Besides create a script to list and append to another file, can Splunk index this type of data?

Thanks.

0 Karma
1 Solution

woodcock
Esteemed Legend

woodcock
Esteemed Legend

pedromvieira
Communicator

Perfect solution. Even better than expected.

0 Karma

jkat54
SplunkTrust
SplunkTrust

You can create a scripted input that does an ls -l or dir on the directory/folder.

0 Karma

pedromvieira
Communicator

Thanks for the input. The app above solved the problem.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...