Getting Data In

Is it possible to upload a CSV file via command line?

ruiwit
New Member

I'm trying to automatize a task that consists in the topics:
-Clean eventdata from Splunk (Done)
-Upload CSV file to replace the data of old version of the file
-show dashboard(Done)

Is it possible to do the 2nd phase through the command line?

Thanks and regards

0 Karma

koshyk
Super Champion

csv lookups exists in each of the apps "lookups" directory. This is a dynamic directory and it is just matter of copying to this directory
Depends on the complexity of your Splunk Installation

  • In STandalone environment, just find a automated method to copy your csv file to the "lookups" directory
  • In clustered env, upload to deployer lookups directory and do push from deployer

I use "rsync" in Linux to copy the lookup files, so it updates only when there is a change to file.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The oneshot command may be what you're looking for. Check out http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/MonitorfilesanddirectoriesusingtheCLI.

---
If this reply helps you, Karma would be appreciated.
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – September 2026

    Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of ...

Federated Search for CloudWatch Unified Data Store Is Generally Available

As organizations modernize their cloud environments, AWS workloads generate more security, operational, and ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...