Getting Data In

Splunk Add-On builder for import of .csv file form page

performancemoni
Path Finder

Hello everyone,

I am trying to create an add-on REST API with Splunk to download a .csv file from a confluence page and push the information to Splunk. 

I would like to have a table with the content of the .csv file, but so far I was just able to get one entry with 130 lines in the index and sourcetype defined by the add-on. It would help if I could split at the end of every line..

I've tried to define the sourcetype in porps.conf with line breaker and some other regex params. and at this point I don't know how to move on.

Data sample:

 

1   UserID,Profile,Role1,Role2,Licenses,Programs,Domain,FieldX
2   user139,Profile description,Role 1,Role 2,"lic1,lic2,lic3,lic4,lic5,lic6",protram,domain,extra_field
.
.
130 user139,Profile description,Role 1,Role 2,"lic1,lic2,lic3,lic4,lic5,lic6",protram,domain,extra_field

 

I've tried to reproduce the content as best as I could, included spaces. The content between the quotes "", all belong to the header "licenses".

Labels (1)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...