Getting Data In

How can index ldif data?

abuschel
New Member

I have the export of an open ldap directory, in ldif format. I need to have this data indexed and somehow pivoted.

IS that possible?

Tags (2)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi abuschel,

basically Splunk is able to index any kind of human readable input, this includes a ldif file. Now for the tricky part, you must tell Splunk how to handle this file and what fields should be extracted and what their format is.

Start by reading the docs about adding data, add your file in the UI Manager and check the results, add any needed field extraction and proceed as needed with the created events.

hope this helps ...

cheers, MuS

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!