Getting Data In

Use script to format file while uploading

harshal_chakran
Builder

Hi,
I have a python script which formats the json file and create a new file in another location. My splunk instance reads this new formatted file.
Is there any way we can use Splunk to take the not formatted file, run script on it and upload the same?

0 Karma

woodcock
Esteemed Legend

You need to use unarchive_cmd. Here is a good tutorial:

http://blogs.splunk.com/2011/07/19/the-naughty-bits-how-to-splunk-binary-logfiles/

0 Karma

jkat54
SplunkTrust
SplunkTrust

Kinda sorta... You can run your script as a scripted input and then monitor the location you're dropping the modified file in. See scripted inputs in inputs.conf documentation. Then see monitor in the same document.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...