Is there a way to parse data files with a script?

[mbbradley]

I have a python script that parses a specific kind of text file. How can I change props.conf and inputs.conf so that splunk uses my python script (which changes the txt file to a csv) and then uploads that csv? Or how could it use the python script on stdout?

[vganjare]

HI,

Can you please try the solution provided @ http://answers.splunk.com/answers/10501/python-script-as-unarchive-cmd-in-props-conf.html

Also, you can take a look @ http://blogs.splunk.com/2011/07/19/the-naughty-bits-how-to-splunk-binary-logfiles/ for parsing using perl script.

Thanks !!