Ingest CSV file as metrics ?

[Muthu_Vinith]

Hello Experts,

I'm currently having CSV file that contains fields such as ID, IP, OS, status, tracking_method, Last_boot, First_found_date, last_activity, hostname, domain, etc. I want to ingest as metrics data. Is it possible? I'd appreciate any guidance or examples how to achieve this.?

Thanks in advance

[VatsalJagani]

@Muthu_Vinith 

• Create metrics index - https://docs.splunk.com/Documentation/Splunk/9.1.2/Indexer/Setupmultipleindexes#Create_metrics_index... 
• You can monitor the CSV file inside a Metrics index.
  • https://docs.splunk.com/Documentation/Splunk/9.1.2/Metrics/GetMetricsInOther 
• You may require to format the CSV file to create the metrics as you need.

I hope this helps!!!

[Muthu_Vinith]

Thanks @VatsalJagani 

[VatsalJagani]

@Muthu_Vinith - If the answer helps you, kindly upvote, and if it resolves your question accept by clicking on "Accept as Solution".

[Muthu_Vinith]

@VatsalJagani  I'm trying to work on setting up auto import for CSV file into a metric index. How to schedule this process? Any insights or examples would be greatly appreciated.

[VatsalJagani]

@Muthu_Vinith - Let's say if your CSV files are getting generated inside a folder called my_csv_files, then you can monitor that folder with Splunk to ingest all new CSV files in that folder.

[monitor:///var/log/my_csv_files]
# Above, you need to put full CSV path
# you need to install Splunk or Splunk UF on that machine and enable this input
disabled = 0
index = my_metrics_idx

Reference - https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/Monitorfilesanddirectorieswithinputs.conf 

I hope this helps!!! Kindly upvote if this helps!!!

[Muthu_Vinith]

Okay, Thanks @VatsalJagani