Getting Data In

Plot data from TCP to Google Maps

streddy
Explorer

Hi,

I am interested in plotting marine data from:

http://www.marinetraffic.com/ais/exportraw.aspx?id=1234567890&protocol=xml&msgtype=extended&timespan...

onto the google Maps app in Splunk as an example.

I'd like to know how to point Splunk at the right address.

Tags (2)
0 Karma

lguinn2
Legend

It appears that your data will have fields named LAT and LON. Try this:

sourcetype=shipdata moresearchstuff
| eval _geo = tostring(LAT) + "," + tostring(LON)

This will create the _geo field that the app expects.

To get the data into Splunk, you have many choices. You could set up a feed as they describe in the web page. Or you could use the data export function to retrieve the data into a file. Once you have the data in a file, you could upload it into Splunk using the Manager and Data Inputs. It will be easiest if you have already created a sourcetype for your data. You could put the following lines in $SPLUNK_HOME/etc/system/local/props.conf

[shipdata]
BREAK_ONLY_BEFORE=\<row
TIME_PREFIX=TIMESTAMP\=\"
MAX_TIMESTAMP_LOOKAHEAD=30
TIME_FORMAT=%Y-%m-%dT%H:%M:%S

The fields will be extracted for you automatically. If you need more help than this, may I suggest the Getting Data In manual...

0 Karma

streddy
Explorer

Thank you so much!!!

0 Karma

streddy
Explorer

But how do I get splunk to index the data in the first place?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...