Hello Splunk Experts,
what is the best technique to integrate several CSV's arround 58 different type of sources from different machines and build one overall dashboard on the top of those sources, i have 2 options in this:
1- Splunk will monitor those entire CSV's and all transformation and cleansing will be made after using splunk searches and joins and in that case i'm using Splunk as an ELT ( Splunk Loading -> Splunk Transformation and Cleansing --> Data Visualization on Splunk )
2- Use a data integration tools ETL to transforms those several CSV's into more simplest CSV's arround 4 to 5 CSV's files and let splunk monitoring it.
My question is what is the best DI Studio tool for Splunk? what is the best approach? and what is the fast way to achieve this? I currently prefer the second option
Please give me your opinion,
Thanks, Roy Imad