Splunk Enterprise

Help, my data is overwritten

Cleffa
Engager

Hi, sometimes there are 3 new data and I need JSON separate, but they overwritten, I find no way to add a UUID to the file name
/results_%H%M%S.json

Cleffa_2-1751921365801.png

 

 

 

0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

View solution in original post

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...