Getting Data In

Is it possible to upload a CSV file via command line?

ruiwit
New Member

I'm trying to automatize a task that consists in the topics:
-Clean eventdata from Splunk (Done)
-Upload CSV file to replace the data of old version of the file
-show dashboard(Done)

Is it possible to do the 2nd phase through the command line?

Thanks and regards

0 Karma

koshyk
Super Champion

csv lookups exists in each of the apps "lookups" directory. This is a dynamic directory and it is just matter of copying to this directory
Depends on the complexity of your Splunk Installation

  • In STandalone environment, just find a automated method to copy your csv file to the "lookups" directory
  • In clustered env, upload to deployer lookups directory and do push from deployer

I use "rsync" in Linux to copy the lookup files, so it updates only when there is a change to file.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The oneshot command may be what you're looking for. Check out http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/MonitorfilesanddirectoriesusingtheCLI.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...