Which type of file can I add as threat list in Splunk Enterprise Security?

[RiccardoV]

Hi guys,
I am wondering if I could use a binary file with my own format as threat list in Splunk ES app. That file contains a list of ip addresses with some additional informations.

In my own app I read that file through a python script and I want to add this (big) list of ips in ES. Can ES app read/use that binary file using my python script or I have to convert it in plain text / csv?

thanks!

[RiccardoV · Accepted solution]

I resolved this using a standard csv file, it seems that I cannot use my own binary format.