{"id":9366,"date":"2016-03-29T08:06:26","date_gmt":"2016-03-29T12:06:26","guid":{"rendered":"http:\/\/www.iri.com\/blog\/?p=9366"},"modified":"2026-02-23T14:55:08","modified_gmt":"2026-02-23T19:55:08","slug":"iri-voracity-add-on-for-splunk","status":"publish","type":"post","link":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/","title":{"rendered":"Indexing Splunk with Voracity Add-On"},"content":{"rendered":"<p style=\"text-align: left;\"><em><strong>Update Q3&#8217;2019:<\/strong> Subsequent to the development of the IRI Voracity Add-On for Splunk described below, there is now also a <a href=\"https:\/\/www.iri.com\/blog\/business-intelligence\/iri-masking-app-splunk\/\">Splunkbase-registered IRI Voracity App for Splunk<\/a> available for Seamless Data Preparation, Indexing, and Visualization&#8230;<\/em><span style=\"font-size: 12pt;\"><br \/>\n<\/span><\/p>\n<p>After our first examples of external <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/blog\/business-intelligence\/nextform-prepares-unstructured-data-splunk-indexing\/\">unstructured data preparation<\/a> and <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/blog\/data-protection\/secure-then-splunk-a-format-preserving-encryption-and-pseduonymization-example\/\">PII data masking<\/a> for Splunk generated interest in these capabilities, IRI wanted to develop a direct integration from the Splunk user interface (UI). This article covers a new <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/voracity\">IRI Voracity<\/a> add-on for Splunk that indexes data from different Voracity workflows. It also works for constituent CoSort <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/cosort\/sortcl\">SortCL<\/a> job script\u00a0executions, such as\u00a0\u00a0<a href=\"http:\/\/www.iri.com\/products\/nextform\">IRI NextForm<\/a> for providing\u00a0replicated data,\u00a0or <a href=\"http:\/\/www.iri.com\/products\/rowgen\">IRI RowGen<\/a> for providing test data, directly in\u00a0Splunk.<\/p>\n<p>Recall that Splunk is a great indexing and visualization platform, but it lacks the power to process many forms of data or to de-identify it with certain methods important to CISOs. By embedding the power of Voracity into Splunk\u2019s intuitive UI, you can directly inject data into Splunk that\u2019s been pre-processed and protected in IRI job scripts or workflows.<\/p>\n<p style=\"font-weight: bold;\"><span style=\"font-weight: bold;\"><span style=\"font-weight: bold;\">Installing the IRI Voracity Add-on for Splunk<\/span><\/span><\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li>Download <a href=\"https:\/\/drive.google.com\/file\/d\/0By8hCrafiPThTVFtSFo1MmxsRjVsOXJxazJIS0w4c0Qzazlz\/view\">this archive<\/a>, which contains python scripts, Splunk files, and sample IRI job scripts.<\/li>\n<li>Copy the iri_cosort folder from the extracted archived into your splunk etc\/apps\/ folder.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p align=\"center\"><a title=\"IRI Voracity Add-on for Splunk - Dan Mcleod 0.jpg\" href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-0.jpg\" rel=\"prettyPhoto\"><img decoding=\"async\" style=\"width: 392px; height: 204px;\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/t_IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-0.jpg\" alt=\"\" \/><\/a><\/p>\n<p>To verify the installation of the add-on in Splunk, click <span style=\"font-style: italic;\">Settings &gt; Data Inputs<\/span>. Browse to IRI and see that parameter entry screen. That&#8217;s it. Your IRI data input module is now ready for use, and you can start indexing data prepared in IRI Voracity (CoSort SortCL job) scripts directly into Splunk.<\/p>\n<p><span style=\"font-weight: bold;\">Working Example<\/span><\/p>\n<p>You can use any IRI job script with your new Splunk Input Module, but for this example, we want to demonstrate how easy it is to encrypt a set of data and then index it into Splunk.<\/p>\n<p>For this example, we just used a basic CSV file consisting of 6 fields: Name, Surname, City, State, CCnumber, ID, stored in the file <span style=\"font-style: italic;\">Name-City-State-CCNumber-SSN-Random-short.csv<\/span>. Note, however, that the data source could have been any one or a number of IRI-supported <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/workbench\/data-sources\">data sources<\/a>. Because of the personally identifiable information (PII) in this file, it would be extremely unsafe to expose it on a platform such as Splunk. See this <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/blog\/data-protection\/secure-then-splunk-a-format-preserving-encryption-and-pseduonymization-example\/\">first article<\/a> on the use of <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/fieldshield\">IRI FieldShield<\/a> in preparing flat-file data for Splunk. Notice how relatively inconvenient that was without this new tie-in.<\/p>\n<p>Here, we sorted the raw data file by state, pseudonymised the last name column, partially redacted the Credit Card Number, and protected the NID value in the last column with an AES-256 format preserving encryption (FPE) algorithm. With the new plug-in, Splunk ingests the output of that IRI job automatically, and indexes it on the fly.<\/p>\n<p><span style=\"font-weight: bold;\">Step-by-Step<\/span><\/p>\n<p>We included a sample data set and IRI job script to use in this tutorial. You must have an <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/cosort\">IRI CoSort<\/a> or <a style=\"color: #1155cc; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/voracity\">Voracity<\/a> license that can run SortCL job scripts, and the free Splunk add-on pack from IRI to do the same.<\/p>\n<p>1. Copy the provided SortCL script (splunk1.scl) and the provided data file, <span style=\"font-style: italic;\">Name-City-State-CCNumber-SSN-Random-short.csv<\/span> into the same folder<\/p>\n<p>2. Inside splunk1.scl, ensure the \/INFILE command points to the absolute location of that CSV file; e.g.,<\/p>\n<p style=\"font-size: 10pt; font-family: Courier New;\" align=\"center\"><span style=\"font-size: 10pt; font-family: Courier New;\"><span style=\"font-family: Courier New; font-size: 10pt;\">\/INFILE=C:\\Name-City-State-CCNumber-SSN-Random-short.csv<\/span><\/span><\/p>\n<p align=\"center\"><a title=\"IRI Voracity Add-on for Splunk - Dan Mcleod 1.jpg\" href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-1.jpg\" rel=\"prettyPhoto\"><img decoding=\"async\" style=\"width: 633px; height: 361px;\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/t_IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-1.jpg\" alt=\"\" \/><\/a><\/p>\n<p style=\"font-size: 9pt; font-style: italic;\" align=\"center\"><span style=\"font-size: 9pt; font-style: italic;\"><span style=\"font-size: 9pt; font-style: italic;\">The IRI Workbench <\/span><a style=\"color: #1155cc; font-size: 9pt; font-style: italic; text-decoration: underline;\" href=\"http:\/\/www.iri.com\/products\/workbench\/voracity-gui\">GUI for Voracity<\/a><span style=\"font-size: 9pt; font-style: italic;\">, showing a simple CoSort SortCL job script that pre-sorts and masks data going into Splunk. The GUI allows you to hand-code the jobs (in the color-coded syntax-aware editor) , or create them automatically in end-to-end wizards, a visual ETL workflow design palette, or an optional plug-in from AnalytiX DS called Mapping Manager.<\/span><\/span><\/p>\n<p>3. Inside Splunk Settings -&gt; Data Inputs -&gt; IRI Voracity, click \u201cadd new\u201d<\/p>\n<p><a title=\"IRI Voracity Add-on for Splunk - Dan Mcleod 2.jpg\" href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-2.jpg\" rel=\"prettyPhoto\"><img decoding=\"async\" style=\"width: 658px; height: 326px;\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/t_IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-2.jpg\" alt=\"\" \/><\/a><br \/>\nIn the Data Input list, enter the name you want to give the dataset, and the full path to the IRI job script; e.g.,<span style=\"font-family: Courier New;\">C:\\IRI\\CoSort95\\myjobs\\splunk1.scl<\/span>.<\/p>\n<p><a title=\"IRI Voracity Add-on for Splunk - Dan Mcleod 3.jpg\" href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-3.jpg\" rel=\"prettyPhoto\"><img decoding=\"async\" style=\"width: 624px; height: 332px;\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/t_IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-3.jpg\" alt=\"\" \/><\/a><\/p>\n<p style=\"font-style: italic;\" align=\"center\"><span style=\"font-style: italic;\"><span style=\"font-style: italic;\">Data input settings in the IRI Voracity Add-on for Splunk<\/span><\/span><\/p>\n<p>5. Splunk will now add this data input to its watch list and will index it once, and then again anytime data is changed or the system is re-started. With each new IRI_Voracity dashboard data source and job script you define, you can prepare, search, and visualize more data in more ways.<\/p>\n<p>Below is Voracity output that was pumped into Splunk by this process:<\/p>\n<p><a title=\"IRI Voracity Add-on for Splunk - Dan Mcleod 4.jpg\" href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-4.jpg\" rel=\"prettyPhoto\"><img decoding=\"async\" style=\"width: 624px; height: 265px;\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/t_IRI-Voracity-Add-on-for-Splunk-Dan-Mcleod-4.jpg\" alt=\"\" \/><\/a><\/p>\n<p>As you can see by the highlighted entry below, which matches what was done in Voracity, the newly prepared data was automatically indexed and is now safe and ready for analysis in Splunk.<\/p>\n<p><a href=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/Splunk-list.png\" rel=\"attachment wp-att-9384\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9384\" src=\"http:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/Splunk-list.png\" alt=\"Splunk list\" width=\"621\" height=\"464\" \/><\/a><\/p>\n<p>Now, running Voracity from Splunk is much easier. The add-on creates new performance and ergonomic value for users who need safe, reliable analytic data culled from structured, semi-structured, and unstructured sources.<\/p>\n<p>For more information on the interaction between IRI software and Splunk, e-mail <a style=\"color: #1155cc; text-decoration: underline;\" href=\"mailto:voracity@iri.com\">voracity@iri.com<\/a>, or submit your comments below.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Update Q3&#8217;2019: Subsequent to the development of the IRI Voracity Add-On for Splunk described below, there is now also a Splunkbase-registered IRI Voracity App for Splunk available for Seamless Data Preparation, Indexing, and Visualization&#8230; After our first examples of external unstructured data preparation and PII data masking for Splunk generated interest in these capabilities, IRI<\/p>\n<div><a class=\"btn-filled btn\" href=\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\" title=\"Indexing Splunk with Voracity Add-On\">Read More<\/a><\/div>\n","protected":false},"author":99,"featured_media":11623,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[108,32,1,776,2255],"tags":[1019,1021,1419,512,1420,1022,98,97,1020,546,789,94,68,574,1418,940],"class_list":["post-9366","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-big-data-2","category-business-intelligence","category-data-transformation2","category-etl","category-archived-articles","tag-add-on","tag-aes-256","tag-cloud-analytics","tag-csv-file","tag-data-anlaytics","tag-dataset","tag-format-preserving-encryption","tag-fpe","tag-index-data","tag-iri-cosort","tag-iri-voracity","tag-job-scripts","tag-sortcl","tag-splunk","tag-splunk-add-on","tag-workflow"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.4 (Yoast SEO v23.4) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Indexing Splunk with Voracity Add-On - IRI<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Indexing Splunk with Voracity Add-On\" \/>\n<meta property=\"og:description\" content=\"Update Q3&#8217;2019: Subsequent to the development of the IRI Voracity Add-On for Splunk described below, there is now also a Splunkbase-registered IRI Voracity App for Splunk available for Seamless Data Preparation, Indexing, and Visualization&#8230; After our first examples of external unstructured data preparation and PII data masking for Splunk generated interest in these capabilities, IRIRead More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\" \/>\n<meta property=\"og:site_name\" content=\"IRI\" \/>\n<meta property=\"article:published_time\" content=\"2016-03-29T12:06:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-23T19:55:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png\" \/>\n\t<meta property=\"og:image:width\" content=\"337\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dan Klajn\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dan Klajn\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\"},\"author\":{\"name\":\"Dan Klajn\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/1a0c27efa5ebf90f03a47a0f6a2e25af\"},\"headline\":\"Indexing Splunk with Voracity Add-On\",\"datePublished\":\"2016-03-29T12:06:26+00:00\",\"dateModified\":\"2026-02-23T19:55:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\"},\"wordCount\":798,\"commentCount\":5,\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png\",\"keywords\":[\"add-on\",\"AES-256\",\"cloud analytics\",\"csv file\",\"data anlaytics\",\"dataset\",\"format-preserving encryption\",\"FPE\",\"index data\",\"IRI CoSort\",\"IRI Voracity\",\"job scripts\",\"SortCL\",\"Splunk\",\"Splunk Add-on\",\"workflow\"],\"articleSection\":[\"Big Data\",\"Business Intelligence (BI&#041;\",\"Data Transformation\",\"ETL\",\"Archived Articles\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\",\"url\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\",\"name\":\"Indexing Splunk with Voracity Add-On - IRI\",\"isPartOf\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png\",\"datePublished\":\"2016-03-29T12:06:26+00:00\",\"dateModified\":\"2026-02-23T19:55:08+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png\",\"width\":337,\"height\":200,\"caption\":\"Voracity Splunk combination\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.iri.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Indexing Splunk with Voracity Add-On\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.iri.com\/blog\/#website\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"name\":\"IRI\",\"description\":\"Total Data Management Blog\",\"publisher\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.iri.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.iri.com\/blog\/#organization\",\"name\":\"IRI\",\"url\":\"https:\/\/www.iri.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"contentUrl\":\"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png\",\"width\":750,\"height\":206,\"caption\":\"IRI\"},\"image\":{\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/1a0c27efa5ebf90f03a47a0f6a2e25af\",\"name\":\"Dan Klajn\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1fb4bfe59fb29791649f8763a29a219b?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1fb4bfe59fb29791649f8763a29a219b?s=96&d=blank&r=g\",\"caption\":\"Dan Klajn\"},\"url\":\"https:\/\/www.iri.com\/blog\/author\/danklajn\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Indexing Splunk with Voracity Add-On - IRI","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/","og_locale":"en_US","og_type":"article","og_title":"Indexing Splunk with Voracity Add-On","og_description":"Update Q3&#8217;2019: Subsequent to the development of the IRI Voracity Add-On for Splunk described below, there is now also a Splunkbase-registered IRI Voracity App for Splunk available for Seamless Data Preparation, Indexing, and Visualization&#8230; After our first examples of external unstructured data preparation and PII data masking for Splunk generated interest in these capabilities, IRIRead More","og_url":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/","og_site_name":"IRI","article_published_time":"2016-03-29T12:06:26+00:00","article_modified_time":"2026-02-23T19:55:08+00:00","og_image":[{"width":337,"height":200,"url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","type":"image\/png"}],"author":"Dan Klajn","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Dan Klajn","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#article","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/"},"author":{"name":"Dan Klajn","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/1a0c27efa5ebf90f03a47a0f6a2e25af"},"headline":"Indexing Splunk with Voracity Add-On","datePublished":"2016-03-29T12:06:26+00:00","dateModified":"2026-02-23T19:55:08+00:00","mainEntityOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/"},"wordCount":798,"commentCount":5,"publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","keywords":["add-on","AES-256","cloud analytics","csv file","data anlaytics","dataset","format-preserving encryption","FPE","index data","IRI CoSort","IRI Voracity","job scripts","SortCL","Splunk","Splunk Add-on","workflow"],"articleSection":["Big Data","Business Intelligence (BI&#041;","Data Transformation","ETL","Archived Articles"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/","url":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/","name":"Indexing Splunk with Voracity Add-On - IRI","isPartOf":{"@id":"https:\/\/www.iri.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage"},"image":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","datePublished":"2016-03-29T12:06:26+00:00","dateModified":"2026-02-23T19:55:08+00:00","breadcrumb":{"@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#primaryimage","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","width":337,"height":200,"caption":"Voracity Splunk combination"},{"@type":"BreadcrumbList","@id":"https:\/\/www.iri.com\/blog\/data-transformation2\/iri-voracity-add-on-for-splunk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.iri.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Indexing Splunk with Voracity Add-On"}]},{"@type":"WebSite","@id":"https:\/\/www.iri.com\/blog\/#website","url":"https:\/\/www.iri.com\/blog\/","name":"IRI","description":"Total Data Management Blog","publisher":{"@id":"https:\/\/www.iri.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.iri.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.iri.com\/blog\/#organization","name":"IRI","url":"https:\/\/www.iri.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","contentUrl":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2019\/02\/iri-logo-total-data-management-small-1.png","width":750,"height":206,"caption":"IRI"},"image":{"@id":"https:\/\/www.iri.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/1a0c27efa5ebf90f03a47a0f6a2e25af","name":"Dan Klajn","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.iri.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1fb4bfe59fb29791649f8763a29a219b?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1fb4bfe59fb29791649f8763a29a219b?s=96&d=blank&r=g","caption":"Dan Klajn"},"url":"https:\/\/www.iri.com\/blog\/author\/danklajn\/"}]}},"jetpack_featured_media_url":"https:\/\/www.iri.com\/blog\/wp-content\/uploads\/2016\/03\/voracity-splunk.png","_links":{"self":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/9366"}],"collection":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/users\/99"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/comments?post=9366"}],"version-history":[{"count":18,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/9366\/revisions"}],"predecessor-version":[{"id":13129,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/posts\/9366\/revisions\/13129"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media\/11623"}],"wp:attachment":[{"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/media?parent=9366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/categories?post=9366"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iri.com\/blog\/wp-json\/wp\/v2\/tags?post=9366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}