Splunk Enterprise

Help, my data is overwritten

Cleffa
Engager

Hi, sometimes there are 3 new data and I need JSON separate, but they overwritten, I find no way to add a UUID to the file name
/results_%H%M%S.json

Cleffa_2-1751921365801.png

 

 

 

0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

View solution in original post

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...