custom script from props.conf

ajitshukla61116 · ‎05-24-2019

Hi,
We have one csv file which contains registration no ,timestamp,latitude ,longitude ,these files are being ingested into splunk by a 3rd party.
We need to have a new field named "distance" into this data for this we have a python script which takes latitude and longitude as input and provide distance as an output.
How can we do this process before ingesting the data into Splunk??

Please help..

richgalloway · ‎05-24-2019

Have your custom script read the CSV file, add the distance field, and then write the CSV to Splunk. The 3rd party will have to stop sending the file to Splunk.

---
If this reply helps you, Karma would be appreciated.

custom script from props.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

SplunkTrust Application Period is Officially OPEN!

Join the Conversation

custom script from props.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

SplunkTrust Application Period is Officially OPEN!