Splunk Search

Creating local temporary file creates Checksum mismatch

Epicism1
Explorer

Hello,

I'm trying to create an app that runs a script that executes an app, and the app creates a log file that I'm trying to index. The issue is that when I write the log file to a folder in the app I'm getting a Checksum mismatch, which is causing issues. I don't want to use the OS' temporary folder because it needs to be OS neutral (and TMK inputs.conf doesn't allow for %TEMP% type variables), so is there a way to create temporary files within the Splunk directory that are not included in the Checksum verification?

Thank you.

0 Karma
1 Solution

guilmxm
SplunkTrust
SplunkTrust

Hi,

I would use $SPLUNK_HOME/var/log/

This won't generate the checksum message.

View solution in original post

0 Karma

guilmxm
SplunkTrust
SplunkTrust

Hi,

I would use $SPLUNK_HOME/var/log/

This won't generate the checksum message.

0 Karma

Epicism1
Explorer

Brilliant!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...