Request: xlsx conversion & indexing

[ChadMedeiros]

Hi, great project!
I notice you are parsing .csv as well as docx formats. I'd like to request you include .xlsx parsing as well.

Additionally, and this is more of a stretch, it would be wonderful if you could take the contents of a csv/xlsx and direct them to a different sourcetype (configurable in the Mail Server data input settings). Ideally a csv or xlsx attachment would get parsed into Splunk as though you were indexing the data directly. This is a bit tricker, but would allow simple CSVs and XLSXs to be delivered into Splunk through scheduled emails.

Cheers

[seunomosowon]

Hi Chad, Did you try breaking the event using a line breaker? You might be able to break the event at the start of the CSV and set a different sourcetype. I’ll see what I can do to add a more flexible approach though. Cheers, Seun

…

On Tue, 13 Mar 2018 at 16:19, ChadMedeiros ***@***.***> wrote: Hi, great project! I notice you are parsing .csv as well as docx formats. I'd like to request you include .xlsx parsing as well. Additionally, and this is more of a stretch, it would be wonderful if you could take the contents of a csv/xlsx and direct them to a different sourcetype (configurable in the Mail Server data input settings). Ideally a csv or xlsx attachment would get parsed into Splunk as though you were indexing the data directly. This is a bit tricker, but would allow simple CSVs and XLSXs to be delivered into Splunk through scheduled emails. Cheers — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#6>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AA_ZsyTunvzCZxpK9iLUQHqZqNrqFfLcks5teCncgaJpZM4SpYZ0> .

[seunomosowon]

I'll add something for .xlsx during the next revision.