Getting Data In

How to add data to splunk with custom source and sourceType value

phagunbaya
Explorer

My requirements are to save a csv formatted data into splunk from a custom app. I'm using django bindings.
Was not able to figure out which API should I use for inserting data with custom source and sourceType field values from within the python script.

0 Karma
1 Solution

phagunbaya
Explorer
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If your data is formatted as CSV then you probably don't need a custom sourcetype. Use 'CSV'.

---
If this reply helps you, Karma would be appreciated.
0 Karma

phagunbaya
Explorer

That's the default behaviour. I was thinking of if I could change it. Also if I mention "source" and "sourcetype" column in my cvs data then these are renamed as "extracted_source" and "extracted_sourcetype".

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...