Re: custom script from props.conf

ajitshukla61116 · ‎05-24-2019

Hi,
We have one csv file which contains registration no ,timestamp,latitude ,longitude ,these files are being ingested into splunk by a 3rd party.
We need to have a new field named "distance" into this data for this we have a python script which takes latitude and longitude as input and provide distance as an output.
How can we do this process before ingesting the data into Splunk??

Please help..

richgalloway · ‎05-24-2019

Have your custom script read the CSV file, add the distance field, and then write the CSV to Splunk. The 3rd party will have to stop sending the file to Splunk.

---
If this reply helps you, Karma would be appreciated.

custom script from props.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation