CHAPTER 9

image

Getting the Flight Data into Splunk

This chapter discusses in detail the data used by the Airline On-Time Performance project. It introduces two ways to get structured data into Splunk: Using comma-separated value CSV files and directly from a relational database. This chapter also covers various ways to handle complex timestamps based on data spread over multiple columns.

Working with CSV Files

CSV files are probably the most popular and easiest way to import and export data to and from a relational database or other systems and applications. In this section we are going to use a public data set that contains information about all ...

Get Big Data Analytics Using Splunk: Deriving Operational Intelligence from Social Media, Machine Data, Existing Data Warehouses, and Other Real-Time Streaming Sources now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.