<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to avoid splunk from indexing duplicate data? (Sending using python + HTML) in Splunk Dev</title>
    <link>https://community.splunk.com/t5/Splunk-Dev/How-to-avoid-splunk-from-indexing-duplicate-data-Sending-using/m-p/512808#M9151</link>
    <description>&lt;P&gt;Hello everyone!&lt;BR /&gt;&lt;BR /&gt;I am using a python script to send some data to a splunk instance on my own machine. The code is something like this:&lt;/P&gt;&lt;P&gt;service = client.connect(host='localhost',port=8089,username='SOMETHING',password='SOMETHING2')&lt;BR /&gt;myindex = service.indexes["indexName"]&lt;BR /&gt;myindex.submit(jsonData, sourcetype="bobby", host="local")&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there any way to "tell" Splunk not to index anything duplicated? That is, anything that already exists in the index.&lt;/P&gt;&lt;P&gt;I know i could mess with the script to avoid sending duplicates, but if splunk could do it, things would be easier.&lt;/P&gt;&lt;P&gt;Thanks!&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 06 Aug 2020 16:38:23 GMT</pubDate>
    <dc:creator>LAcioffi</dc:creator>
    <dc:date>2020-08-06T16:38:23Z</dc:date>
    <item>
      <title>How to avoid splunk from indexing duplicate data? (Sending using python + HTML)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/How-to-avoid-splunk-from-indexing-duplicate-data-Sending-using/m-p/512808#M9151</link>
      <description>&lt;P&gt;Hello everyone!&lt;BR /&gt;&lt;BR /&gt;I am using a python script to send some data to a splunk instance on my own machine. The code is something like this:&lt;/P&gt;&lt;P&gt;service = client.connect(host='localhost',port=8089,username='SOMETHING',password='SOMETHING2')&lt;BR /&gt;myindex = service.indexes["indexName"]&lt;BR /&gt;myindex.submit(jsonData, sourcetype="bobby", host="local")&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there any way to "tell" Splunk not to index anything duplicated? That is, anything that already exists in the index.&lt;/P&gt;&lt;P&gt;I know i could mess with the script to avoid sending duplicates, but if splunk could do it, things would be easier.&lt;/P&gt;&lt;P&gt;Thanks!&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2020 16:38:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/How-to-avoid-splunk-from-indexing-duplicate-data-Sending-using/m-p/512808#M9151</guid>
      <dc:creator>LAcioffi</dc:creator>
      <dc:date>2020-08-06T16:38:23Z</dc:date>
    </item>
    <item>
      <title>Re: How to avoid splunk from indexing duplicate data? (Sending using python + HTML)</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/How-to-avoid-splunk-from-indexing-duplicate-data-Sending-using/m-p/512830#M9152</link>
      <description>Splunk does not and can not filter duplicates on ingest.</description>
      <pubDate>Thu, 06 Aug 2020 18:06:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/How-to-avoid-splunk-from-indexing-duplicate-data-Sending-using/m-p/512830#M9152</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-08-06T18:06:34Z</dc:date>
    </item>
  </channel>
</rss>

