https://community.splunk.com/t5/Getting-Data-In/How-can-index-ldif-data/m-p/151920#M97958 <P>I have the export of an open ldap directory, in ldif format. I need to have this data indexed and somehow pivoted.</P> <P>IS that possible?</P> Fri, 14 Feb 2014 23:21:05 GMT abuschel 2014-02-14T23:21:05Z https://community.splunk.com/t5/Getting-Data-In/How-can-index-ldif-data/m-p/151920#M97958 <P>I have the export of an open ldap directory, in ldif format. I need to have this data indexed and somehow pivoted.</P> <P>IS that possible?</P> Fri, 14 Feb 2014 23:21:05 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-index-ldif-data/m-p/151920#M97958 abuschel 2014-02-14T23:21:05Z https://community.splunk.com/t5/Getting-Data-In/How-can-index-ldif-data/m-p/151921#M97959 <P>Hi abuschel,</P> <P>basically Splunk is able to index any kind of human readable input, this includes a <CODE>ldif</CODE> file. Now for the tricky part, you must tell Splunk how to handle this file and what fields should be extracted and what their format is.</P> <P>Start by reading the <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/WhatSplunkcanmonitor">docs about adding data</A>, add your file in the UI Manager and check the results, add any needed <A href="http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Aboutfields">field extraction</A> and proceed as needed with the created events.</P> <P>hope this helps ...</P> <P>cheers, MuS</P> Mon, 17 Feb 2014 07:19:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-index-ldif-data/m-p/151921#M97959 MuS 2014-02-17T07:19:28Z