I have a file, which will be updated multiple times in a single day and the it will be indexed into splunk multiples times in a day, but i want to display the very latest/recently updated file.
how do i do that?
↧