Getting Data In

Is there a way I can input data into splunk manually for offline events?

dritjon
Path Finder

I want to input into splunk the "events" of my fire alarms of all the branch offices.

Is there a way I can manually create an index=firealarm and periodically fill fields I will create such as:

date: 26 october

branch: 01

alarmid: 125

reason: smoking

etc...

I will add new events everytime an alarm is triggered. I know I can do this in excel, but I want to store these data on Splunk and build dashboards too

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @dritjon,

you can create an input that reads file with the name and format of your files from a folder that you can access.

then, when you have files to index, you can copy them in this folder and Splunk automatically index them and put them in the index you want.

You can follow this approach both on one indexer or in one other server with a Splunk full instance (Heavy Forwarder) or Universal Forwarder.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...