topic Is there a way to parse data files with a script? in Splunk Dev

Is there a way to parse data files with a script?

mbbradley — Mon, 13 Apr 2015 21:15:09 GMT

I have a python script that parses a specific kind of text file. How can I change props.conf and inputs.conf so that splunk uses my python script (which changes the txt file to a csv) and then uploads that csv? Or how could it use the python script on stdout?

Re: Is there a way to parse data files with a script?

vganjare — Tue, 14 Apr 2015 09:48:46 GMT

HI,

Can you please try the solution provided @ http://answers.splunk.com/answers/10501/python-script-as-unarchive-cmd-in-props-conf.html

Also, you can take a look @ http://blogs.splunk.com/2011/07/19/the-naughty-bits-how-to-splunk-binary-logfiles/ for parsing using perl script.

Thanks !!