Is there any way to pre-proccess a Tag Length File before it gets indexed?
You'll need to write a script to read and extract your TLV into comma separated T=V
Example, if you are using 3 digits decimal TLV, your script should have input/output as follow: Input: 001005Hello999006World! Output: T001=Hello, T999=World!
If your script works, you can use Splunk scripted input https://docs.splunk.com/Documentation/Splunk/6.4.3/AdvancedDev/ScriptSetup
What do you mean by "pre-process"? What do you want to do to the file?
