How can I Splunk data from the "Project Cars" game at .conf2017?

[DanielASG]

hi all

i was at splunk conf 2017 and down in the games area there was a game being splunked called project cars

i have been trying to splunk this data but all I'm getting is

\xDE\xC8R

does anyone know how they where getting this UDP data in a way that its usable

thanks

[jvarley_splunk]

Hi Daniel,

I hope you had as much fun with the simulator as we had building it 🙂 The data is broadcast from UDP in a binary data structure that needs to be decoded into text that Splunk can interpret first. We wrote a Python app to listen and format the packets before sending to Splunk via HEC. I am on holiday for next 2 weeks (getting married :)), however, after I return, I will package up the code and publish it to Github / Splunkbase for you to use + the Splunk app. I'll share the links on this question once they are available for download.

In the meantime, in case you are interested, I used this site heavily to get an understanding of the packet structure: http://forum.projectcarsgame.com/showthread.php?40113-COMPLETE-Companion-app-UDP-streaming, and this project from James Muscat (https://github.com/jamesremuscat/pcars) saved countless hours in translating the packets into something useable.

Happy to reach out to you privately to get you up and running when its ready. Project Cars 2 is now out too, and looking forward to getting started on that 🙂

As a final note, in case you are into F1 too, we built a similar integration for F1 2016. I hope to update this for F1 2017 in the near future.

Kind regards,
Jon

[DanielASG]

awesome can not wait

congratulations on the wedding

i did find an API call for the game but only updates every 15 secs but will wait for your app 🙂

Thanks
Dan

[c_boggs]

FYI - I found this sometime before conf, while doing some research.. Apparently Jvarley already uploaded some version of it to github (last update, 4 months ago): https://github.com/jonathanvarley/splunk_pcars