Getting Data In

Is it possible to upload a CSV file via command line?

ruiwit
New Member

I'm trying to automatize a task that consists in the topics:
-Clean eventdata from Splunk (Done)
-Upload CSV file to replace the data of old version of the file
-show dashboard(Done)

Is it possible to do the 2nd phase through the command line?

Thanks and regards

0 Karma

koshyk
Super Champion

csv lookups exists in each of the apps "lookups" directory. This is a dynamic directory and it is just matter of copying to this directory
Depends on the complexity of your Splunk Installation

  • In STandalone environment, just find a automated method to copy your csv file to the "lookups" directory
  • In clustered env, upload to deployer lookups directory and do push from deployer

I use "rsync" in Linux to copy the lookup files, so it updates only when there is a change to file.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The oneshot command may be what you're looking for. Check out http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/MonitorfilesanddirectoriesusingtheCLI.

---
If this reply helps you, Karma would be appreciated.
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...

[Puzzles] Solve, Learn, Repeat: Classic British Rock Bands

This puzzle series (first published here) is based on extracting information from statements about well-known ...

New to the Community? Join Us for an Exclusive Post .conf26 Welcome Session (Plus a ...

Keep the .conf26 Energy Going: Welcome to the Splunk Community! Whether we scanned your badge at the Community ...