Splunk Search

How to check the size of a file on Unix that gets created daily (but not indexed) using a Splunk search?

New Member

I have a file which gets created daily. My requirement is to get the size of the file using a splunk search. The file system is in Unix OS.

Help is much appreciated!!!

Tags (4)
0 Karma
1 Solution

Legend

You can create a scripted input to do this. For many UNIX systems, the following script should work:

#!/bin/sh
ls -lsk absolutepathtoyourfile

Put this script in an appropriate directory and then set up the scripted input. Have the script run once per day. Documentation is here.

HTH!

View solution in original post

Legend

You can create a scripted input to do this. For many UNIX systems, the following script should work:

#!/bin/sh
ls -lsk absolutepathtoyourfile

Put this script in an appropriate directory and then set up the scripted input. Have the script run once per day. Documentation is here.

HTH!

View solution in original post

New Member

Thanks a lot..!!! Much appreciated..

0 Karma