Getting Data In

scripted input to run at top of minute

aaronkorn
Splunk Employee
Splunk Employee

Is it possible to tell Splunk to run a scripted input every 5 min at the top of the minute. Ie Script run at 11:05:00 then 11:10:00? We are running into issues with timeranges and overlap.

0 Karma
1 Solution

JSapienza
Contributor

Simple:

[script://$SPLUNK_HOME\etc\apps\AppName\bin\ScriptName.cmd]
interval = */5 * * * *
sourcetype = MySourceType

View solution in original post

JSapienza
Contributor

Simple:

[script://$SPLUNK_HOME\etc\apps\AppName\bin\ScriptName.cmd]
interval = */5 * * * *
sourcetype = MySourceType

bmacias84
Champion

Thought about using a modular input where your input can check time ever often.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>