Reading vehicle network data ..

eyirik · ‎11-20-2016

Hi i want to read vehicle data in Splunk..

Data is seen on vehice network like below:

ID data length data-in-hex
18fef100 [8] AABBCCDDEEFF9988
18ebff21 [8] 1234567890ABCDEF

FOR EACH ID, data has diffrent meanings. And we have to make bit-operations in data.-in-hex

What is the way to transform these datas according to ID ?

richgalloway · ‎11-20-2016

I would write a scripted input to read the data from the source and perform the necessary transforms and bit operations. It would then prepend a timestamp and deliver the results to Splunk.

---
If this reply helps you, Karma would be appreciated.

Reading vehicle network data ..

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Best Practices: Splunk auto adjust pipeline queue

Announcing Modern Navigation: A New Era of Splunk User Experience

Join the Conversation

Reading vehicle network data ..

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

Best Practices: Splunk auto adjust pipeline queue

Announcing Modern Navigation: A New Era of Splunk User Experience