https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145235#M5416 <P>I'm a bit of a noob so any help here would be greatly appreciated.</P> <P>I have buckets in S3 with .log files contained in .zip files. For some season Splunk (Splunk Cloud) isn't extracting the .zip files and indexing the contained .log files. Any ideas why this would be? When I upload one of the .log files within a .zip file individually it gets indexed beautifully. It was my understanding that Splunk should have no problem indexing files within .zip files.</P> <P>Thanks in advance!</P> Tue, 09 Jun 2015 05:14:53 GMT yoni1887 2015-06-09T05:14:53Z https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145235#M5416 <P>I'm a bit of a noob so any help here would be greatly appreciated.</P> <P>I have buckets in S3 with .log files contained in .zip files. For some season Splunk (Splunk Cloud) isn't extracting the .zip files and indexing the contained .log files. Any ideas why this would be? When I upload one of the .log files within a .zip file individually it gets indexed beautifully. It was my understanding that Splunk should have no problem indexing files within .zip files.</P> <P>Thanks in advance!</P> Tue, 09 Jun 2015 05:14:53 GMT https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145235#M5416 yoni1887 2015-06-09T05:14:53Z https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145236#M5417 <P>Validate your inputs, and make sure that the .zip files are not blacklisted. Most likely they are due to processing and member requirements associated with un/archiving files in the queues.</P> Tue, 09 Jun 2015 06:42:37 GMT https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145236#M5417 esix_splunk 2015-06-09T06:42:37Z https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145237#M5418 <P>According to Splunk doc, it just does not support .zip file on S3 bucket. Refer to the list of supported compressed file format at #4 about this:<BR /> <A href="http://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureInputs#S3_inputs">http://docs.splunk.com/Documentation/AddOns/released/AWS/ConfigureInputs#S3_inputs</A></P> Wed, 02 Sep 2015 21:27:40 GMT https://community.splunk.com/t5/Deployment-Architecture/Why-is-an-AWS-S3-Bucket-with-zip-Files-not-getting-indexed-in/m-p/145237#M5418 czheng 2015-09-02T21:27:40Z