topic Re: Use script to format file while uploading in Getting Data In

Use script to format file while uploading

harshal_chakran — Thu, 22 Sep 2016 09:15:11 GMT

Hi,
I have a python script which formats the json file and create a new file in another location. My splunk instance reads this new formatted file.
Is there any way we can use Splunk to take the not formatted file, run script on it and upload the same?

Re: Use script to format file while uploading

jkat54 — Thu, 22 Sep 2016 10:28:44 GMT

Kinda sorta... You can run your script as a scripted input and then monitor the location you're dropping the modified file in. See scripted inputs in inputs.conf documentation. Then see monitor in the same document.

Re: Use script to format file while uploading

woodcock — Thu, 22 Sep 2016 13:54:53 GMT

You need to use unarchive_cmd. Here is a good tutorial:

http://blogs.splunk.com/2011/07/19/the-naughty-bits-how-to-splunk-binary-logfiles/