Getting Data In

Load File At Same Time Everyday Regardless Of Changes

andrewkenth
Communicator

Just as it states. Is there way to monitor a file and reload it everyday even if it has not changed? Only once per day however.

Thanks!

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file

View solution in original post

0 Karma

andrewkenth
Communicator

I ended up automating a cp cmd and adding the date on the end of the file.

cp <origfilepath> <newfilepath>_`date +"%Y%m%d"`.csv

The easiest way to do this is via chrontab but we use other means (autosys).

I also need to use the sourcefile name in the crcSalt as well in inputs.conf

crcSalt = <SOURCE>
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file
0 Karma

andrewkenth
Communicator

To answer the why it's a list that is maintained, however we need the ability to go back in time and view the state of the list on any particular date. I was thinking that as well but was hoping there was a better way using inputs.conf or similar setting.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...