Getting Data In

how do i connect splunk with a csv file in an diferent server on real time basis?

balajsoz
Path Finder

Am having a csv file(file name: testdata.csv) which stored in a machine with Ip addr 10.80.65.177:8085 and using the same to create reports,dashboards etc in splunk which we installed in another machine with ip addr 10.80.65.183:8000

Now how can i make the splunk to use this csv file on real time basis so that whenever this csv file testdata getting updated, the reports or dashboards in splunk also should get updated with recent data on real time basis.

how can i do that? also i already tried with universal forwarder but after installing it , it asks two port id such as forwarding and receiving port ids..am not sure which of those above port i have to use for this?
i have given forwarder port as 8000 in splunk manager but its not accepting .pls advice

Tags (2)
0 Karma

Ayn
Legend

Splunk itself contains no mechanisms for grabbing that CSV from another system. Installing an Universal Forwarder on the system will not do anything to help your situation as all it does is forwards data that should be indexed to the Splunk instance it's configured to forward to.

Easiest would be if 10.80.65.183 could mount the directory containing the csv file on 10.80.65.177. Then you could just point Splunk to the csv file just like with any other file.

Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...