Getting Data In

Load File At Same Time Everyday Regardless Of Changes

andrewkenth
Communicator

Just as it states. Is there way to monitor a file and reload it everyday even if it has not changed? Only once per day however.

Thanks!

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file

View solution in original post

0 Karma

andrewkenth
Communicator

I ended up automating a cp cmd and adding the date on the end of the file.

cp <origfilepath> <newfilepath>_`date +"%Y%m%d"`.csv

The easiest way to do this is via chrontab but we use other means (autosys).

I also need to use the sourcefile name in the crcSalt as well in inputs.conf

crcSalt = <SOURCE>
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file
0 Karma

andrewkenth
Communicator

To answer the why it's a list that is maintained, however we need the ability to go back in time and view the state of the list on any particular date. I was thinking that as well but was hoping there was a better way using inputs.conf or similar setting.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...