Splunk Search

Data is not getting imported through saved search

abhayneilam
Contributor

Hi,

I want to import the data into splunk through scheduling, How It can be done ? at particular time let's say 10:00 A.M. data should be imported into splunk from a particular directory

Please help me out in this , seeking for help

Thanks in advance !!

0 Karma

Ayn
Legend

Either write a scripted input that runs at the specified time and reads the files you're interested in, or create an external script that moves the files you're interested in into a directory that is monitored by Splunk.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...