importutil can be used to create lookup tables from csv, tsv, json or any other time series media type. For example, assume you would like to import time series data from the Federal Reserve Economic Data website (FRED). E.G. Get US Employment data since 1939, http://research.stlouisfed.org/fred2/data/PAYEMS.csv. You can import this csv into Splunk via the Splunk search window with the command:
<query>|importutil http http://research.stlouisfed.org/fred2/data/PAYEMS.csv | multikv</query>
importutil honors the common URL schema: protocol://<user>:<password>@<host>:<port>/<url-path>. <user>:<password> format has only been tested on ftp and sftp.
Features:
Note:
For detailed install instructions:
Install
For detailed usage:
Usage
Release Notes:
Added format=splunk to http import. This allows one to overcome following bug -> Description: When splunk is installed on windows, multikv's automatic csv parsing omits the last field on each line if the file is dos encoded.
http://splunk-base.splunk.com/answers/71139/issue-with-csv-import
Use this command to enable this feature
|importutil format=splunk http http://someurl/some.csv
Removed ._* files from the tar
Removed .DS_Store files from the tar
Updated tests so they would work on a linux box
Upgraded version number to beta1 !
This version is fully tested (included sftp) on Amazon Linux AMI. Previous versions would have worked... only some of the error case test cases were promlematic
Add screenshot and appIcon for splunkbase
Updated https to import iu.http
Updated importutil to properly import classes from package "iu"
Updated test to toggle logs.
Added an http server for local testing.
Moved all libraries to an "iu" (short for importutil) package
Moved examples to bin/examples so that the SimpleHTTPServer could access the
Added test cases for http, ftp, https.
Modified http, ftp, sftp, https to take an output file. Rather than write t
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.