topic Re: How to input an excel file from an email automatically in Getting Data In

How to input an excel file from an email automatically

Alaza — Fri, 29 Jun 2018 10:52:29 GMT

Hello,

everyday I have an email with an Excell file attached.
To input the data in Splunk, I have to save the file, convert the file in csv then add it to Splunk.
Is it possible to do this action automatically ?

Re: How to input an excel file from an email automatically

richgalloway — Fri, 29 Jun 2018 12:15:52 GMT

Splunk does not automatically handle Excel files. However, you may be able to write a scripted or modular input that reads the mail, detaches the file, converts it to CSV, and indexes it.

Re: How to input an excel file from an email automatically

Alaza — Fri, 29 Jun 2018 13:22:59 GMT

That's the script I need, that's why I asked my question 🙂

Re: How to input an excel file from an email automatically

richgalloway — Fri, 29 Jun 2018 17:00:20 GMT

Your question asked if it was possible and it is, but with some effort on your part.
Getting someone to do the work for you is something else. Check splunkbase to see if it's been done already (I'm pretty sure it hasn't). Otherwise, you'll have to persuade someone to write a script for you.

Re: How to input an excel file from an email automatically

Alaza — Mon, 02 Jul 2018 10:58:45 GMT

I do not have the knowledge to do this script, that's why I need some help.

Re: How to input an excel file from an email automatically

niketn — Mon, 02 Jul 2018 11:38:29 GMT

@Alaza, I am not 100% sure but Protocol Data Input should be able to handle Excel file for input to Splunk. However, as Rich mentioned it might require you to create your own Custom Data Handler.

https://splunkbase.splunk.com/app/1901/

@Damien Dallimore , Can you confirm?

Re: How to input an excel file from an email automatically

Damien_Dallimor — Tue, 03 Jul 2018 02:21:43 GMT

Correct.
xls files are a binary format , so you'd need to decode this in a custom data handler to a textual format.
Plenty of code librarys exist to do the decoding for you that you could reuse in your custom data handler.

Re: How to input an excel file from an email automatically

richgalloway — Tue, 03 Jul 2018 12:51:18 GMT

There are probably some apps on splunkbase to help you read email. The trickiest part will be finding a way to convert the Excel file into CSV, but there may be python libraries that do that. As always, Google is your friend.