Chapter 3. On-boarding Data in Splunk
This chapter will detail the most important aspect of Splunk, that is, adding data to Splunk. We will go through the newly added feature in Splunk 6.3 of JSON and REST API format of IoT event collections, HTTP Event Collector, and then, we will cover the various interfaces and options to on-board data on Splunk. We will also study how to manage event segmentation and improvise the data input process.
The following topics will be covered in this chapter:
- Deep diving into various input methods and sources
- Adding data to Splunk—new interfaces
- Data processing
- Managing event segmentation
- Improving the data input process
Deep diving into various input methods and sources
Splunk supports numerous ways to ingest data on its server. Any data generated from a human-readable machine from various sources can be uploaded using data input methods such as files, directories, and TCP/UDP scripts which can be indexed on the Splunk Enterprise server and analytics...
