we have one Network folder : clientreports
Standard Reports Structure as :
• Path/Foldername/Report Type/Client/Report Period Folders/Files.
Ex: R:/Clientfolder/Coaching Dashboard/ BCBS AZ/YYYY_MM/PDF, Excel.
This is Report Type : I used Rex functionn to read and extract Report Type from Object_Name.
having 27 standard reports folder structure ,
1) MonthlyActivityReport.
2) MonthlyActivityReportDashboard
3) CoachingDemographicReport(vc,lc,wt)
4) CoachingDemographicReport_LC
5) CoachingDemographicReport_VC
6) CoachingDemographicReport_WT
7) QuarterlyProgressReport
--
27) bla bal bla
1st Question is how to Extarct only these 27 folder structure in Splunk Because of in Object name we have different different folder structure
some example as :
1) Report Type/Report Category/ Files -
EX: iHealth_OpenCaseReport/Datafiles,logfiles/Text Files,Excel file.
2) ReportType/Report Period Folder/ Files -
Ex: NICU_Outcomes/2015,2016/PDF Files or Excel Files.
3) Report Type/Client/Report Period Folders/Files.
Ex: aternityOutcomes/ BCBS AZ/2014_12,2015_12/PDF Files.
How
