Getting Data In

Splunk TCP input from python program

Path Finder

Hey guys,

I've crated a python program that does some auditing and then tried to upload to a splunk server. It does this by sending line by line from each file via TCP. I've set up Splunk to listen on a port and it receives the data, but rather than index the entire file once, it indexes each line individually.
Is it possible to send my file line by line and for splunk to wait for an EOF (end of file) or do I need to modify inputs.conf on the splunk server?

Thanks for any help

Tags (1)
0 Karma
1 Solution
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...