I am trying to find a solution for the following problem using splunk. What needs to happen: A cron job runs every few minutes to fire of a search/scan for a core dump(The file will only be present if a fatal error has occured). If the file is found an alert will be issed to needed people and applications(Using an alert) Is there a way to do this? I've tried using source="C:\foo\bar\log\log\*" earliest=-2M@M as noted here in this question link, but with no luck. Is this easily possible? ... View more