excel workbook as lookup or input data type in splunk

[surekhasplunk]

Hi,

I want to use an excel work book which has several tabs with data. How can i use different tabs of a single excel as input datatype in splunk.

Thanks

[javiergn]

You could create a scripted input in PowerShell that converts your Excel files into CSVs first:
http://www.powercram.com/2015/05/use-powershell-to-save-excel-worksheet.html
http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/MonitorWindowsdatawithPowerShellscripts

Then simply read those CSV files in the normal way:
http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Extractfieldsfromfileswithstructureddata

[inventsekar]

Splunk can import any text-based format. Excel file formats such as xls and xlsx is not text-based and as such cannot be read directly by Splunk.
as a workaround, you can convert the excel file to csv file and then upload to splunk.

to confirm this, i tried to upload a excel file, on the first step, it loads fine. 2nd step - data preview, shows