Splunk Search

How to check status of specific indexed file using .../services/admin/inputstatus endpoint?

Bhagyashri
Explorer

I have imported "xyz "folder into splunk and after indexing I want to check status of particular abc.txt file from that xyz folder.
how should I do that?

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

There's a decent description of how to use that endpoint here: http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

The path is in the result, so you can look for it there.

0 Karma

Bhagyashri
Explorer

Thanks!
Thats correct for all monitored data but I want to work that endpoint for just single file.
example if i provide path of that file from folder with that endpoint then it will give me status like missing|ignored|reading completed .
is that possible?
Because I didn't found detail explanation of that endpoint.

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...