How to get the latest version of a lookup file

[yossefn]

Hi, 

I have a SQL job that exports a .csv table to our file server with one column of user names in the file. This job is running once a day at the morning and writing a new file every day with the same name. Since Iv'e uploaded the file once, I can't see the changes of the new files in the next days. 

Is there any option for me to monitor this file as a lookup and run a searches against the most recent data?

Thank you, 

Yossi. 

[richgalloway · Accepted solution]

If you can have the SQL job write the CSV file to your app's 'lookup' directory then your queries can reference it using the lookup command.

[yossefn]

Looks like the SQL will have a little problem to write to a UNIX path, but we'll solve it with different tool to build a job that will copy the lookup file and write it the the Splunk server. 

Thank you @richgalloway for the idea.