topic Why is uploaded data missing? in Getting Data In

Why is uploaded data missing?

suvi1611 — Tue, 20 Jun 2023 02:39:11 GMT

Hi,

I am new to splunk and trying to upload data for practising. I amd using the data from the the below link.

https://docs.splunk.com/Documentation/Splunk/9.0.5/SearchTutorial/GetthetutorialdataintoSplunk

When I try to upload the tutorialdata.zip, It loads for a long time and I get a read timeout

When I extract the tutorialdata.zip and upload a single log file . No issues in uploading, It uploads the logs file and when I click Next --> Set Source Type is empty and not displaying the raw data (as shown in the screenshot) and If I continue till the end, submit and search for the index/source, I get 0 events found.

Could you please suggest If I am missing anything. I am currently using a free license option.

Re: Uploaded data missing

isoutamo — Mon, 19 Jun 2023 13:55:25 GMT

at least earlier this has worked exactly how the manual told. If it didn’t work, then you should try to use trial or full enterprise version, not a free version. The free version has some limitations which shouldn’t affect for this test, but it’s the difference for working environment.

r. Ismo

Re: Uploaded data missing

suvi1611 — Mon, 19 Jun 2023 21:54:40 GMT

Thank you for the quick update. I just tried in Splunk cloud with the same zip file and it was working as expected.