Splunk Search

How can I do fields from text-file?

Luninho
Explorer

I need to get 3 columns: host, port, description from text:
10.224.19.18 | 2222| New server
10.198.18.18 | 2443 | IFT
etc

I use curl-command and output=text

Labels (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

Add a header row, save it somewhere that either a UF, HF or the server itself can read it, and treat it like any other input file, selecting CSV and making the changes to the delimiter as required?

https://docs.splunk.com/Documentation/Splunk/8.0.6/Data/Monitorfilesanddirectorieswithinputs.conf

 

Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...