Splunk Search

How to do a lookup on multiple values in a text file on an HTTP URL?

vivekriyer
Explorer

I have a requirement to be implemented in Splunk.

Facts:
I am a newbie to Splunk.

Problem Statement:
a. There is a text file in an http url that contains space delimited values (similar to a fixed length file).

b. The requirement is to do a lookup on this url, then load the values onto an index (these values get updated frequently and without notification).

c. Searched this community and the documentation, but couldn't quite find an answer.
https://answers.splunk.com/answers/69000/external-file-lookup-is-failing-possible-due-to-a-character...
https://answers.splunk.com/answers/10463/example-of-doing-an-external-lookup-using-http-get-or-post....
http://docs.splunk.com/Documentation/Splunk/6.1.4/Knowledge/Addfieldsfromexternaldatasources

d. Have considered using external_lookup.py (but doesn't accept a http url,that provides a text response, as an input)

e. I am not great inPython and need a quick turnaround.

Please advise the best solution for this scenario

0 Karma
1 Solution

woodcock
Esteemed Legend

vivekriyer
Explorer

Thank you for the quick reply. I will try this out and update this thread. Appreciate the help.

0 Karma
Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...