Is there a way to parse data files with a script?

mbbradley · ‎04-13-2015

I have a python script that parses a specific kind of text file. How can I change props.conf and inputs.conf so that splunk uses my python script (which changes the txt file to a csv) and then uploads that csv? Or how could it use the python script on stdout?

vganjare · ‎04-14-2015

HI,

Can you please try the solution provided @ http://answers.splunk.com/answers/10501/python-script-as-unarchive-cmd-in-props-conf.html

Also, you can take a look @ http://blogs.splunk.com/2011/07/19/the-naughty-bits-how-to-splunk-binary-logfiles/ for parsing using perl script.

Thanks !!

Is there a way to parse data files with a script?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Join the Conversation

Is there a way to parse data files with a script?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk