topic word document data in splunk dashboard in Dashboards & Visualizations

word document data in splunk dashboard

surekhasplunk — Wed, 05 Oct 2016 03:40:03 GMT

Hi,

I have some data in word document and i want to read that file and show the content of the file in splunk dashboard which i have created.
How to do that what should i write in the source code be it xml or html to get the data in shown in the dashboard in one of the panels.

Thanks
Surekha

Re: word document data in splunk dashboard

esix_splunk — Wed, 05 Oct 2016 04:50:39 GMT

So MS Word is a proprietary format and will need to be preprocessed for Splunk to read it (its binary...) I would recommend you check out this article:

http://blogs.splunk.com/2016/06/30/splunking-a-microsoft-word-document-for-metadata-and-content-analysis/

That will guide you to Splunking Word documents and indexing it.

However, I am wondering you mean you just want a Dashboard Panel that contains HTML text. In that case, you cannot include a word file in a panel without alot of customization. Your best bet would be to save that word file as text and import that into your panel.

Re: word document data in splunk dashboard

surekhasplunk — Wed, 05 Oct 2016 07:16:45 GMT

I tried with .txt file and it worked but .doc isn't working i want .doc only as i want to show bullets and all.
Please help me with the html/xml code patch if you can.

Re: word document data in splunk dashboard

esix_splunk — Wed, 05 Oct 2016 07:20:27 GMT

You cannot do it. You cant post binary documents in a splunk dashboard.

Re: word document data in splunk dashboard

marycordova — Mon, 14 Sep 2020 18:53:20 GMT

It would have been nice I there had been some instructions or a link on how to add a pdf or plain text doc into a dashboard panel.

Re: word document data in splunk dashboard

bowesmana — Tue, 15 Sep 2020 03:17:57 GMT

I've done similar to what @esix_splunk suggests, i.e. saving the Word document as non MS HTML and then pasting the resultant HTML to an <html> panel in the dashboard. Removing the horrendous MS HTML is a real pain, so if you can start off with raw text, and do the formatting inside Splunk, that's a better option.

Also, you can include the text from a file so you can externalise it from the dashboard itself and use tokens for the data.