Getting Data In

Is it possible to upload a CSV file via command line?

ruiwit
New Member

I'm trying to automatize a task that consists in the topics:
-Clean eventdata from Splunk (Done)
-Upload CSV file to replace the data of old version of the file
-show dashboard(Done)

Is it possible to do the 2nd phase through the command line?

Thanks and regards

0 Karma

koshyk
Super Champion

csv lookups exists in each of the apps "lookups" directory. This is a dynamic directory and it is just matter of copying to this directory
Depends on the complexity of your Splunk Installation

  • In STandalone environment, just find a automated method to copy your csv file to the "lookups" directory
  • In clustered env, upload to deployer lookups directory and do push from deployer

I use "rsync" in Linux to copy the lookup files, so it updates only when there is a change to file.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The oneshot command may be what you're looking for. Check out http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/MonitorfilesanddirectoriesusingtheCLI.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...