Splunk Search

How do I automate the indexing and field extraction process?

minkyuk
Explorer

Good morning,

For the past few days, I have been putting log files through an indexer and extracted some fields manually.

However, I want to automate this process where log files are generated automatically at a certain directory. I am stuck on how to perform this task. (Daily scheduled event perhaps?)

If anyone has any idea on this matter, I would appreciate your input.

Thanks,
Jack

0 Karma

woodcock
Esteemed Legend

It is very straightforward, start here and it should be easy:

http://docs.splunk.com/Documentation/Splunk/6.2.4/Data/Monitorfilesanddirectories

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...