icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Bucket Reader
SHA256 checksum (bucket-reader_123.tgz) 604ad6d784b884c836129365557a653f6b965f16ac143cd5897245d7790a9051 SHA256 checksum (bucket-reader_122.tgz) d76047e36b5a4d1ee49481c147cdd93d69cb44137974622122f3b82cd3b651ec SHA256 checksum (bucket-reader_12.tgz) d8b0a596e76bb577a9ca0e4f17cdea5adcf93d6dcb715dddaf7f862ee82dcd7d SHA256 checksum (bucket-reader_11.tgz) eec9a60dbbd18cd0561c4a9e5487519e74fa82797d62d8d43a60012fdddd986b SHA256 checksum (bucket-reader_10beta.tgz) c1ce20632b52fc5c2a49e169a0e6b45b32690d3be8cb509dcf0c88f7dc930d9b
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


Bucket Reader

This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
This app allows you to read data in Splunk buckets using 3rd-party Hadoop-based applications. When you use the Hunk archiving functionality to export your raw-data journal files to HDFS, you can immediately query and analyze that data via Hunk.

But what if you want to also view that data via applications like Hive or Pig? This app provides Hadoop tool classes that allow you to do just that:

* Provides classes that implement both the “old-style” and new “new-style” Hadoop interfaces, based on the org.apache.hadoop.mapred and org.apache.hadoop.mapreduce packages.

* Provides access to index-time fields only — search-time fields are not available.

* Lets you configure which fields are retrieved as keys and as values.

* Formats returned data as TSV.

After installing this app, open it in Hunk. The documentation tab will provide complete usage instructions, including examples.

The app is self-documenting, and includes full instructions and examples.

Please feel free to contact the developer with questions, bugs, comments, and requests: kschon@splunk.com.

I will respond as time permits.

Release Notes

Version 1.2.3
Sept. 14, 2016

Added a new serde property, "com.splunk.journal.hadoop.lenient", that controls what happens when the a field value is incompatible with the declared column type.

Improvements to logging.

Version 1.2.2
July 24, 2016
Version 1.2
July 21, 2016
  • Added new parameter "com.splunk.journal.hadoop.suppress.exceptions" that makes it easier to iterate over directories of mixed file types.
  • Added support for upcoming changes in Splunk journal format.
Version 1.1
Dec. 14, 2015
Version 1.0beta
May 29, 2015

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.