topic Re: Send csv data to Http Event Collector in Getting Data In

Send csv data to Http Event Collector

learnkhru — Tue, 24 Nov 2020 14:35:26 GMT

Hi,I want to send a csv pure data file as it is to splunk via Http Event Collector. How can I do it? Can I send it to /raw or /event or something?

How to make splunk to parse it properly?

Thanks

Re: Send csv data to Http Event Collector

to4kawa — Tue, 24 Nov 2020 23:42:58 GMT

dl_json.py

import requests import json headers = {'accept': 'application/json', 'content-type': 'application/json'} url = 'https://www3.nhk.or.jp/news/special/coronavirus/data/47patients-data.json' response=requests.get(url,headers=headers) json_obj = response.json() f = open("output.json","w") json.dump(json_obj, f)

It's easier to download in python like this
The csv can be parsed.

Re: Send csv data to Http Event Collector

learnkhru — Wed, 25 Nov 2020 06:07:52 GMT

No, I meant to send a csv file to splunk's HEC

The actuall data itself in the file with the commas and everything...

Is it possible?

Re: Send csv data to Http Event Collector

thambisetty — Wed, 25 Nov 2020 06:22:01 GMT

@learnkhru

You need to have a program which will call Splunk HEC URL and post data which you would like to forward to Splunk. you can not forward/post csv file just with csv and having SPLUNK HEC endpoint without using any programming language.

There are other options to read files using Splunk. No need to use Splunk HEC.