 
					
				
		
I thought there was a way (command) that would users with the right permissions to read a file on the Splunk filesystem without indexing that file. Would someone point me to the documentation (if it exists)?
 
		
		
		
		
		
	
			
		
		
			
					
		Well that would be a rather dangerous thing, security-wise. It doesn't exist. The closest things are "inputcsv" and "inputlookup". You could if you really wanted write a custom search command that did what you want.
 
					
				
		
Maybe I'm wrong but, secure or not, I thought it existed, at least maybe in a previous version.
