Splunk Search

Fake Input for Lab

daniel333
Builder

Hey guys,

Thought I asked this recently but I can't find the post. I am building out a lab and I was wondering if anyone had any script that could generate fake data? Inflow of apache or IIS data. Something like that.

thanks!
-Daniel

Tags (2)
0 Karma

MHibbin
Influencer

daniel333,

When I create demonstrational apps, I often find that I cannot find a data generator for my requirements. I don't actually have much experience with Apache of IIS logs, but if this was me, I would take a bunch of common log events (probably find lists of these online), and then decide which sections of the logs need to change with each log event (e.g. date/time, ip addresses, etc.). I would then write a simple bash script that uses "while true; do" loops and place random (depending on the content you could use something like bash's random function, or I like to simply use the "shuf" variable) content into STDOUT/log file and feed this into Splunk. This could then be built on if you need more organised logs.

There are probably much tidier methods for achieving this in a python script of something, but it's whatever works for you.

Also, with regards to your "lost" question, you can find past-posts/questions in your profile section (click your name at the top of the page).

Regards,

MHibbin

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...