我们目前有一个45mb的CSV文件,我们将要加载到Splunk kvstore中。我希望能够通过python SDK完成此操作,但在加载记录时遇到了一些麻烦。
我可以找到更新kvstore的唯一方法是service.collection.insert()函数,据我所知,一次只能接受1行。由于该文件中有25万行,因此我不能等待每天上载所有行。
这是我到目前为止所拥有的:
from splunklib import client, binding
import json, pandas as pd
from copy import deepcopy
data_file = '/path/to/file.csv'
username = 'user'
password = 'splunk_pass'
connectionHandler = binding.handler(timeout=12400)
connect_kwargs = {
'host': 'splunk-host.com',
'port': 8089,
'username': username,
'password': password,
'scheme': 'https',
'autologin': True,
'handler': connectionHandler
}
flag = True
while flag:
try:
service = client.connect(**connect_kwargs)
service.namespace['owner'] = 'Nobody'
flag = False
except binding.HTTPError:
print('Splunk 504 Error')
kv = service.kvstore
kv['test_data'].delete()
df = pd.read_csv(data_file)
df.replace(pd.np.nan, '', regex=True)
df['_key'] = df['key_field']
result = df.to_dict(orient='records')
fields = deepcopy(result[0])
for field in fields.keys():
fields[field] = type(fields[field]).__name__
df = df.astype(fields)
kv.create(name='test_data', fields=fields, owner='nobody', sharing='system')
for row in result:
row = json.dumps(row)
row.replace("nan", "'nan'")
kv['learning_center'].data.insert(row)
transforms = service.confs['transforms']
transforms.create(name='learning_center_lookup', **{'external_type': 'kvstore', 'collection': 'learning_center', 'fields_list': '_key, userGuid', 'owner': 'nobody'})
# transforms['learning_center_lookup'].delete()
collection = service.kvstore['learning-center']
print(collection.data.query())
除了永久性地加载25万条记录的问题之外,它始终以nan作为值而连续失败,并且无论我在其中尝试处理nan的内容如何,它都始终存在于字典中值。
您可以直接与REST端点交互,然后根据需要使用storage/collections/data/{collection}/batch_save
保存多个项目。