Getting Data In

how we RUN Script which convert binary index data into csv and again save it into same index?

ajitshukla
Explorer

Hi please help me ,I have Universal forwarder install on another machine ,which send binary data to splunk insatnce .
On splunk instance I want ot RUN python script which will convert the binary data into csv and save it into another index.

before this I was able to run pyhton script on Universal Forwarder which will convert binary data into csv file and forwarder monitor that csv file and send it to splunk.

But my requirement has changed now I want to run pyhton script on splunk instance which will convert binary data coming from forwarder to csv in real time.

please help

Tags (1)
0 Karma

badarsebard
Communicator

Unfortunately there's no way to do this. One of the hard requirements of Splunk is that forwarded data is in text, no binary. The only way I see around this is to transmit the binary data through a different channel like sftp, rsync, etc. to a directory on the Splunk instance and then use a scripted input to convert the binary data to csv.

0 Karma

vishaltaneja070
Motivator

@ajitshukla

If data is coming to Splunk then you can create a report using search command and outputlookup the result to a csv file.

0 Karma

ajitshukla
Explorer

but converting binary data to csv logic written in python script ,so in any case I have to use python script

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...