All,
We have a report that runs every hour. Basically 10 line CSV. Might grow to 20 lines on an off week.
myreport-%date%.csv
It's populating a larger data set. 99% of the time the report will be identical the previous run how ever. Since it's only a few kilobytes in size I would just rather Splunk ingest the report every time. But I believe there is some mechanism in Splunk the prevents it from reading in a file identical to another file in the same directory. Anyway to disable this?
I tried crcSalt= and it only worked for one run.
↧
How can I configure Splunk to read in a log that is identical to another log int he same directory?
↧