Getting Data In

Load File At Same Time Everyday Regardless Of Changes

andrewkenth
Communicator

Just as it states. Is there way to monitor a file and reload it everyday even if it has not changed? Only once per day however.

Thanks!

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file

View solution in original post

0 Karma

andrewkenth
Communicator

I ended up automating a cp cmd and adding the date on the end of the file.

cp <origfilepath> <newfilepath>_`date +"%Y%m%d"`.csv

The easiest way to do this is via chrontab but we use other means (autosys).

I also need to use the sourcefile name in the crcSalt as well in inputs.conf

crcSalt = <SOURCE>
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

My first though is "why?"... after that, I'd say define a small scripted input to run every 86400 seconds that writes the file content to stdout, something like this:

cat /path/to/file
0 Karma

andrewkenth
Communicator

To answer the why it's a list that is maintained, however we need the ability to go back in time and view the state of the list on any particular date. I was thinking that as well but was hoping there was a better way using inputs.conf or similar setting.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...