Hi All,
I've searched quite a lot but cant find a good method to get this workflow to work.
I've got a python script in splunk which returns a JSON and a dashboard which tables the results.
The script will import new entries when it is run daily.
I want to export the new table values as a .csv from Splunk and ensure I'm not exporting duplicates or entries that I've exported previously.
At the moment my thought process is that if I can tag entries with an import date I can filter out previous days imports.
Is there documentation or suggestions on how I can have new entries dedup'd and then only export new and unique entries?
... View more