Getting Data In

Splunk TCP input from python program

SplunkUser5888
Path Finder

Hey guys,

I've crated a python program that does some auditing and then tried to upload to a splunk server. It does this by sending line by line from each file via TCP. I've set up Splunk to listen on a port and it receives the data, but rather than index the entire file once, it indexes each line individually.
Is it possible to send my file line by line and for splunk to wait for an EOF (end of file) or do I need to modify inputs.conf on the splunk server?

Thanks for any help

Tags (1)
0 Karma
1 Solution
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...