Getting Data In

Load File At Same Time Everyday Regardless Of Changes

andrewkenth
Communicator

Just as it states. Is there way to monitor a file and reload it everyday even if it has not changed? Only once per day however.

Thanks!

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file

View solution in original post

0 Karma

andrewkenth
Communicator

I ended up automating a cp cmd and adding the date on the end of the file.

cp <origfilepath> <newfilepath>_`date +"%Y%m%d"`.csv

The easiest way to do this is via chrontab but we use other means (autosys).

I also need to use the sourcefile name in the crcSalt as well in inputs.conf

crcSalt = <SOURCE>
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file
0 Karma

andrewkenth
Communicator

To answer the why it's a list that is maintained, however we need the ability to go back in time and view the state of the list on any particular date. I was thinking that as well but was hoping there was a better way using inputs.conf or similar setting.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

How to find the worst searches in your Splunk environment and how to fix them

Everyone knows Splunk is a powerful platform for running searches and doing data analytics. Your ...

Share Your Feedback: On Admin Config Service (ACS)!

Help Us Build a Better Admin Config Service Experience (ACS)   We Want Your Feedback on Admin Config Service ...