After the add-on has been installed into Splunk and restarted, configure a data input through either of the following
Set the following values for the data input
Note the IP address of the machine where the add-on is located. The IP address needs to be reached from the machine where the F1 2019 game is run from. The IP address of the machine may have a different internal IP address compared to the IP address that the machine can be reached on externally.
While a data input can receive data from multiple gaming rigs at the same time, there will be a point when the UDP packets will over whelm the single UDP port configured by the add-on. For multiple gaming rig set ups the preference should be for multiple data inputs with associated unique UDP port numbers.
To send telemetry from the F1 2019 game to the add-on goto "Game Options" then "Settings" then "Telemetry Settings", then set
JSON messages are created in the "F1 2019" format.
A single player will generate about 400KB of data per second ( at about 45 events per second ) when racing and telemetry is set to 10Hz.
From within Splunk the status of the add-on can be examined if access to the _internal index is available using the following SPL -
Also if the add-on is working but not receiving data, please check that UDP data can be sent to the machine and port created within "Data inputs". For example running the following bash command line from the same machine where the add-on is installed will send a badly formed UDP message to the add-on -
echo -n "test">
The badly formed UDP message can be found within Splunk using the following SPL -
Within the returned results an event similar to below should be seen if the badly formed UDP message arrived successfully in Splunk -
Error unpacking UDP packet - Bad telemetry packet: too short (4 bytes)
The bash command line can be used to send a badly formed UDP message to remote machines and different ports, for example to send to remote machine
example.com on port
20778 use -
echo -n "test">
The F1 2019 App for Splunk is a minimal app that contains lookup tables and pre-canned dashboards to optionally view data generated from this add-on.
Alternatively use the following SPL to start exploring the data -
The add-on has also been tested successfully using a Playstation with Codemasters F1 2020 game when telemetry mode is set to F1 2019. Also, consider using the F1 2020 Add-on for Splunk if using the Codemasters F1 2020 game.
Breaking change added, sourcetype codemasters:f1:2019:lap:1 created instead of codemasters:f1:2019:lap_data:1
Fixed some events being truncated
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.