custom script from props.conf

ajitshukla61116 · ‎05-24-2019

Hi,
We have one csv file which contains registration no ,timestamp,latitude ,longitude ,these files are being ingested into splunk by a 3rd party.
We need to have a new field named "distance" into this data for this we have a python script which takes latitude and longitude as input and provide distance as an output.
How can we do this process before ingesting the data into Splunk??

Please help..

richgalloway · ‎05-24-2019

Have your custom script read the CSV file, add the distance field, and then write the CSV to Splunk. The 3rd party will have to stop sending the file to Splunk.

---
If this reply helps you, Karma would be appreciated.

custom script from props.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs

Join the Conversation

custom script from props.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs