How to check the size of a file on Unix that gets created daily (but not indexed) using a Splunk search?

[harshavmb]

I have a file which gets created daily. My requirement is to get the size of the file using a splunk search. The file system is in Unix OS.

Help is much appreciated!!!

[lguinn2 · Accepted solution]

You can create a scripted input to do this. For many UNIX systems, the following script should work:

#!/bin/sh
ls -lsk absolutepathtoyourfile

Put this script in an appropriate directory and then set up the scripted input. Have the script run once per day. Documentation is here.

HTH!

[harshavmb]

Thanks a lot..!!! Much appreciated..