Getting Data In

Splunk TCP input from python program

SplunkUser5888
Path Finder

Hey guys,

I've crated a python program that does some auditing and then tried to upload to a splunk server. It does this by sending line by line from each file via TCP. I've set up Splunk to listen on a port and it receives the data, but rather than index the entire file once, it indexes each line individually.
Is it possible to send my file line by line and for splunk to wait for an EOF (end of file) or do I need to modify inputs.conf on the splunk server?

Thanks for any help

Tags (1)
0 Karma
1 Solution
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...