Getting Data In

How to monitor file changes in Splunk?

Communicator

Hi guys,

I need to monitor file changes in Splunk. I have a file that is updated constantly, and I need to know when there's a update. And if is possible, where it changed.

Any help, i'll be grateful.

Regards

0 Karma
1 Solution

Champion

There is an app for that called File/Directory Information Input. That app monitors the meta-data of the file-system and tells you when files and directories changed. It doesn't currently report on that changes within the file, just that the file changed.

View solution in original post

Champion

There is an app for that called File/Directory Information Input. That app monitors the meta-data of the file-system and tells you when files and directories changed. It doesn't currently report on that changes within the file, just that the file changed.

View solution in original post

Communicator

Ok, that is that i was looking for. Thanks you very much

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!