Is it possible to have splunk notified to re-run indexing on a file , based on a Git commit ? ( similar to how jenkins build gets triggered based on a new commit to Github)

[suser2019]

Is it possible to have splunk notified to re-run indexing on a file , based on a Git commit ? ( similar to how jenkins build gets triggered based on a new commit to Github)

have a file that needs to be updated constantly with new information. I am trying to automate a way that splunk reads this file everytime it is pushed to github repository as a commit.

[richgalloway · Accepted solution]

Consider having commits trigger a REST oneshot command to index the committed file. See https://docs.splunk.com/Documentation/Splunk/7.3.0/RESTREF/RESTinput#data.2Finputs.2Foneshot.2F.7Bna... for details.

[suser2019]

Thank you for your suggestion. I am new to this. How do I have commits to the github repo trigger a REST oneshot command ? via serverside git hooks ?

[richgalloway]

I don't know the specifics.