topic Re: excel workbook as lookup or input data type in splunk in Getting Data In

excel workbook as lookup or input data type in splunk

surekhasplunk — Mon, 17 Oct 2016 09:30:19 GMT

Hi,

I want to use an excel work book which has several tabs with data. How can i use different tabs of a single excel as input datatype in splunk.

Thanks

Re: excel workbook as lookup or input data type in splunk

inventsekar — Mon, 17 Oct 2016 09:36:48 GMT

Splunk can import any text-based format. Excel file formats such as xls and xlsx is not text-based and as such cannot be read directly by Splunk.
as a workaround, you can convert the excel file to csv file and then upload to splunk.

to confirm this, i tried to upload a excel file, on the first step, it loads fine. 2nd step - data preview, shows

Re: excel workbook as lookup or input data type in splunk

javiergn — Mon, 17 Oct 2016 09:44:48 GMT

You could create a scripted input in PowerShell that converts your Excel files into CSVs first:
http://www.powercram.com/2015/05/use-powershell-to-save-excel-worksheet.html
http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/MonitorWindowsdatawithPowerShellscripts

Then simply read those CSV files in the normal way:
http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Extractfieldsfromfileswithstructureddata