Reading vehicle network data ..

eyirik · ‎11-20-2016

Hi i want to read vehicle data in Splunk..

Data is seen on vehice network like below:

ID data length data-in-hex
18fef100 [8] AABBCCDDEEFF9988
18ebff21 [8] 1234567890ABCDEF

FOR EACH ID, data has diffrent meanings. And we have to make bit-operations in data.-in-hex

What is the way to transform these datas according to ID ?

richgalloway · ‎11-20-2016

I would write a scripted input to read the data from the source and perform the necessary transforms and bit operations. It would then prepend a timestamp and deliver the results to Splunk.

---
If this reply helps you, Karma would be appreciated.

Reading vehicle network data ..

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Join the Conversation

Reading vehicle network data ..

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security