Getting the Flight Data into Splunk

This chapter discusses in detail the data used by the Airline On-Time Performance project. It introduces two ways to get structured data into Splunk: Using comma-separated value (CSV files and directly from a relational database. This chapter also covers various ways to handle complex timestamps based on data spread over multiple columns.