topic Re: Can I ingest JSON file into an index in Getting Data In

Can I ingest JSON file into an index

cherrypick — Tue, 11 Mar 2025 01:13:06 GMT

Hi,

I have a python modular input that populates an index (index_name). This ran into some gateway error issues causing some data to be missing in the index. Is it possible to ingest a JSON file containing the missing data directly into the index (index_name)?

Thanks,

Re: Can I ingest JSON file into an index

kiran_panchavat — Tue, 11 Mar 2025 07:23:03 GMT

@cherrypick

If this is a one-time ingestion of the missing data, the simplest method is to use the Splunk Web UI to upload the JSON file directly into your index_name. In the "Input Settings" step, set the Index field to index_name (your existing index). Review the configuration, then click Submit to ingest the file into index_name.