Getting Data In

Load File At Same Time Everyday Regardless Of Changes

andrewkenth
Communicator

Just as it states. Is there way to monitor a file and reload it everyday even if it has not changed? Only once per day however.

Thanks!

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file

View solution in original post

0 Karma

andrewkenth
Communicator

I ended up automating a cp cmd and adding the date on the end of the file.

cp <origfilepath> <newfilepath>_`date +"%Y%m%d"`.csv

The easiest way to do this is via chrontab but we use other means (autosys).

I also need to use the sourcefile name in the crcSalt as well in inputs.conf

crcSalt = <SOURCE>
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file
0 Karma

andrewkenth
Communicator

To answer the why it's a list that is maintained, however we need the ability to go back in time and view the state of the list on any particular date. I was thinking that as well but was hoping there was a better way using inputs.conf or similar setting.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...