Reading vehicle network data ..

[eyirik]

Hi i want to read vehicle data in Splunk..

Data is seen on vehice network like below:

ID data length data-in-hex
18fef100 [8] AABBCCDDEEFF9988
18ebff21 [8] 1234567890ABCDEF

FOR EACH ID, data has diffrent meanings. And we have to make bit-operations in data.-in-hex

What is the way to transform these datas according to ID ?

[richgalloway]

I would write a scripted input to read the data from the source and perform the necessary transforms and bit operations. It would then prepend a timestamp and deliver the results to Splunk.