Splunk Enterprise

Help, my data is overwritten

Cleffa
Engager

Hi, sometimes there are 3 new data and I need JSON separate, but they overwritten, I find no way to add a UUID to the file name
/results_%H%M%S.json

Cleffa_2-1751921365801.png

 

 

 

0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

View solution in original post

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Cleffa 

Looking at the limited docs, it doesnt look like you can inject a UUID into the filename, however it does access timestamp variables so you could perhaps add a millisecond (%f) to your filename to make it more unique?

Check ou the timestamp docs at https://docs.python.org/3.7/library/datetime.html#strftime-strptime-behavior:~:text=Microsecond%20as....

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...