Splunk TCP input from python program

SplunkUser5888 — Tue, 05 Feb 2013 08:15:51 GMT

Hey guys,

I've crated a python program that does some auditing and then tried to upload to a splunk server. It does this by sending line by line from each file via TCP. I've set up Splunk to listen on a port and it receives the data, but rather than index the entire file once, it indexes each line individually.
Is it possible to send my file line by line and for splunk to wait for an EOF (end of file) or do I need to modify inputs.conf on the splunk server?

Thanks for any help

Re: Splunk TCP input from python program

Ayn — Tue, 05 Feb 2013 08:22:22 GMT

http://docs.splunk.com/Documentation/Splunk/latest/Data/Indexmulti-lineevents

topic Splunk TCP input from python program in Getting Data In

Splunk TCP input from python program

Re: Splunk TCP input from python program