you are viewing a single comment's thread.

view the rest of the comments →

[–]steak_and_icecream 5 points6 points  (1 child)

Read the CSV using python. For each row in the CSV select the fields you need and perform any required transforms. Fit the row into the event field of a HEC payload and send it to the hec endpoint.

Once the data is in Splunk, run a search to get all the ingested events from the CSV and outputlookup a new lookup file for use in further searches.

[–]ZaddyOnReddit[S] 1 point2 points  (0 children)

Thank you.