All Apps and Add-ons

Eventgen one line a time

jadengoho
Builder

Hi All,
I want to generate logs line by line.
After the first line was generated it will wait for 60 seconds before generating the second line.

529 29/03/20 12:49:13 000002
CASH WITHDRAWAL  0,0000.00  ALL
0000000000*******910
 12:49:35 TRANSACTION END
*461*03/29/2020*12:49*
     *PRIMARY CARD READER ACTIVATED*
*462*03/29/2020*18:39*
     *TRANSACTION START*
 CARD INSERTED
CARD: ************1806
DATE 29-03-20    TIME 18:39:07
 18:39:08 ATR RECEIVED T=0
 18:39:15 PIN ENTERED
 18:39:17 OPCODE = B   A DB
 18:39:18 GENAC 1 : ARQC
 18:39:20 GENAC 2 : TC
----------
530 29/03/20 18:39:30 000001
BALANCE INQUIRY   ALL
0000000000*******806
 18:39:33 CARD TAKEN
 18:39:38 TRANSACTION END
*463*03/29/2020*18:39*
     *PRIMARY CARD READER ACTIVATED*
*464*03/29/2020*23:36*
     *PRIMARY CARD READER ACTIVATED*
*465*03/30/2020*06:13*
     *TRANSACTION START*
 CARD INSERTED
CARD: ************4417
DATE 30-03-20    TIME 06:13:45
 06:13:46 ATR RECEIVED T=0
 06:13:53 PIN ENTERED
 06:14:07 OPCODE = A   A DB
 06:14:23 NOTES STACKED
 06:14:25 CARD TAKEN

Sample:

529 29/03/20 12:49:13 000002 - will wait another 60seconds before next line
CASH WITHDRAWAL 0,0000.00 ALL - will wait another 60seconds before next line
0000000000******910 - *will wait another 60seconds before next line**
 12:49:35 TRANSACTION END will wait another 60seconds before next line

Hope you get my point.

0 Karma
1 Solution

jadengoho
Builder

Hi All,
I tried everything i can to generate logs one line at a time but unfortunately Splunk eventgen doesn't have that function.
I end up adding it line by line on the Windows desktop.

I hope future version of Splunk eventgen can generate this kind of situation.

View solution in original post

0 Karma

jadengoho
Builder

Hi All,
I tried everything i can to generate logs one line at a time but unfortunately Splunk eventgen doesn't have that function.
I end up adding it line by line on the Windows desktop.

I hope future version of Splunk eventgen can generate this kind of situation.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...