Splunk Search

How to check the size of a file on Unix that gets created daily (but not indexed) using a Splunk search?

harshavmb
New Member

I have a file which gets created daily. My requirement is to get the size of the file using a splunk search. The file system is in Unix OS.

Help is much appreciated!!!

Tags (4)
0 Karma
1 Solution

lguinn2
Legend

You can create a scripted input to do this. For many UNIX systems, the following script should work:

#!/bin/sh
ls -lsk absolutepathtoyourfile

Put this script in an appropriate directory and then set up the scripted input. Have the script run once per day. Documentation is here.

HTH!

View solution in original post

lguinn2
Legend

You can create a scripted input to do this. For many UNIX systems, the following script should work:

#!/bin/sh
ls -lsk absolutepathtoyourfile

Put this script in an appropriate directory and then set up the scripted input. Have the script run once per day. Documentation is here.

HTH!

View solution in original post

harshavmb
New Member

Thanks a lot..!!! Much appreciated..

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!