Send csv data to Http Event Collector

[learnkhru]

Hi,I want to send a csv pure data file as it is to splunk via Http Event Collector. How can I do it? Can I send it to /raw or /event or something?

How to make splunk to parse it properly?

Thanks

[thambisetty]

@learnkhru 

You need to have a program which will call Splunk HEC URL and post data which you would like to forward to Splunk. you can not forward/post csv file just with csv and having SPLUNK HEC endpoint without using any programming language.

There are other options to read files using Splunk. No need to use Splunk HEC.

[to4kawa]

dl_json.py

import requests
import json
headers = {'accept': 'application/json', 'content-type': 'application/json'}
url = 'https://www3.nhk.or.jp/news/special/coronavirus/data/47patients-data.json'
response=requests.get(url,headers=headers)
json_obj = response.json()
f = open("output.json","w")
json.dump(json_obj, f)

It's easier to download in python like this
The csv can be parsed.

[learnkhru]

No, I meant to send a csv file to splunk's HEC

The actuall data itself in the file with the commas and everything...

Is it possible?