Splunk Search

Data is not getting imported through saved search

abhayneilam
Contributor

Hi,

I want to import the data into splunk through scheduling, How It can be done ? at particular time let's say 10:00 A.M. data should be imported into splunk from a particular directory

Please help me out in this , seeking for help

Thanks in advance !!

0 Karma

Ayn
Legend

Either write a scripted input that runs at the specified time and reads the files you're interested in, or create an external script that moves the files you're interested in into a directory that is monitored by Splunk.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...