Splunk Search

how to start a Splunk search from a bash script

juancnunezc
New Member

I am pretty new to Splunk. I am looking for a way to start a Splunk search from a bash script. The scrip will be scheduled using cron. It will run periodically checking for a file. If the file has been received, it should trigger a Splunk search. Is is possible to do that? How? Any clue?

Thanks

Tags (2)
0 Karma

Ayn
Legend
0 Karma

juancnunezc
New Member

Ok, I did not know that. I am running Splunk a in Linux system and files with performance data from Windows will be received peridiocally. So, I can know if these file have been received using Splunk, right? How?. Could I trigger a search over those files?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Why use bash? Splunk can monitor files and schedule scripts natively.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...