Splunk TCP input from python program

[SplunkUser5888]

Hey guys,

I've crated a python program that does some auditing and then tried to upload to a splunk server. It does this by sending line by line from each file via TCP. I've set up Splunk to listen on a port and it receives the data, but rather than index the entire file once, it indexes each line individually.
Is it possible to send my file line by line and for splunk to wait for an EOF (end of file) or do I need to modify inputs.conf on the splunk server?

Thanks for any help

[Ayn · Accepted solution]

http://docs.splunk.com/Documentation/Splunk/latest/Data/Indexmulti-lineevents