icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Bucket Reader
SHA256 checksum (bucket-reader_123.tgz) 604ad6d784b884c836129365557a653f6b965f16ac143cd5897245d7790a9051 SHA256 checksum (bucket-reader_122.tgz) d76047e36b5a4d1ee49481c147cdd93d69cb44137974622122f3b82cd3b651ec SHA256 checksum (bucket-reader_12.tgz) d8b0a596e76bb577a9ca0e4f17cdea5adcf93d6dcb715dddaf7f862ee82dcd7d SHA256 checksum (bucket-reader_11.tgz) eec9a60dbbd18cd0561c4a9e5487519e74fa82797d62d8d43a60012fdddd986b SHA256 checksum (bucket-reader_10beta.tgz) c1ce20632b52fc5c2a49e169a0e6b45b32690d3be8cb509dcf0c88f7dc930d9b
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

Bucket Reader

Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
This app allows you to read data in Splunk buckets using 3rd-party Hadoop-based applications. When you use the Hunk archiving functionality to export your raw-data journal files to HDFS, you can immediately query and analyze that data via Hunk.

But what if you want to also view that data via applications like Hive or Pig? This app provides Hadoop tool classes that allow you to do just that:

* Provides classes that implement both the “old-style” and new “new-style” Hadoop interfaces, based on the org.apache.hadoop.mapred and org.apache.hadoop.mapreduce packages.

* Provides access to index-time fields only — search-time fields are not available.

* Lets you configure which fields are retrieved as keys and as values.

* Formats returned data as TSV.

After installing this app, open it in Hunk. The documentation tab will provide complete usage instructions, including examples.

The app is self-documenting, and includes full instructions and examples.

Please feel free to contact the developer with questions, bugs, comments, and requests: kschon@splunk.com.

I will respond as time permits.

Release Notes

Version 1.2.3
Sept. 14, 2016

Added a new serde property, "com.splunk.journal.hadoop.lenient", that controls what happens when the a field value is incompatible with the declared column type.

Improvements to logging.

Version 1.2.2
July 24, 2016

Version 1.2
July 21, 2016

* Added new parameter "com.splunk.journal.hadoop.suppress.exceptions" that makes it easier to iterate over directories of mixed file types.
* Added support for upcoming changes in Splunk journal format.

Version 1.1
Dec. 14, 2015

Version 1.0beta
May 29, 2015

3
Installs
1,444
Downloads
Share Subscribe LOGIN TO DOWNLOAD

Subscribe Share

AppInspect Tooling

Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
© 2005-2020 Splunk Inc. All rights reserved.
Splunk®, Splunk>®, Listen to Your Data®, The Engine for Machine Data®, Hunk®, Splunk Cloud™, Splunk Light™, SPL™ and Splunk MINT™ are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.