Getting Data In
Highlighted

How to index zero byte files where the information is found in the name of the file?

Communicator

How to index zero byte files?
For some reason, a customer created a monitoring file that only contains information on the filename.

Ex:

abx20160627exit.ok

I'd like to index the timestamp on the filename and the "type" (exit).

Besides create a script to list and append to another file, can Splunk index this type of data?

Thanks.

0 Karma
Highlighted

Re: How to index zero byte files where the information is found in the name of the file?

SplunkTrust
SplunkTrust

You can create a scripted input that does an ls -l or dir on the directory/folder.

0 Karma
Highlighted

Re: How to index zero byte files where the information is found in the name of the file?

Communicator

Thanks for the input. The app above solved the problem.

0 Karma
Highlighted

Re: How to index zero byte files where the information is found in the name of the file?

Esteemed Legend
Highlighted

Re: How to index zero byte files where the information is found in the name of the file?

Communicator

Perfect solution. Even better than expected.

0 Karma