topic Re: Tutorial data upload error in Getting Data In

Tutorial data upload error

becksyboy — Sun, 21 Feb 2016 19:54:34 GMT

Hi,

I'm fairly new to Splunk and currently undergoing some training. Within my home lab I have a Splunk instance installed and am trying to upload the tutorial data. When i select the .zip file it says "uploading file" and is at 100%. After 10 mins i get an upload Error stating there was a read timeout?

Any ideas why i can't upload the .zip file?

thanks

Re: Tutorial data upload error

dkeck — Mon, 22 Feb 2016 10:39:20 GMT

Hello beckysboy,

maybe thats to simple but why don´t you unzip the data first?. Advantage would be that you have a preview, which is not supported for .zip files.

You may want to have a look at the splunk logs. Maybe that will give you more information about the error.

You can find them in $SPLUNK_HOME/var/log/splunk/splunkd.log

Kind Regards

Re: Tutorial data upload error

becksyboy — Mon, 22 Feb 2016 10:44:55 GMT

Thanks, that was my next step, I was following the instructions for the tutorial data, where it stated not to unzip, but ill unzip them first instead.

Re: Tutorial data upload error

gyslainlatsa — Mon, 22 Feb 2016 11:15:05 GMT

hi,

follow this link for more informations:

http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchTutorial/GetthetutorialdataintoSplunk

Re: Tutorial data upload error

ChrisG — Mon, 22 Feb 2016 15:29:10 GMT

In order for the tutorial data to work, you should not unzip the file.

What version of Splunk, and what operating system and browser are you using? We have tested the tutorial on multiple platforms, and we did find a file upload defect on Windows 7. We have filed that with the dev team to fix.

Re: Tutorial data upload error

becksyboy — Mon, 22 Feb 2016 18:12:55 GMT

Hi Chris,

I'm running my Splunk instance on a Windows 12 R2 server running within VM Ware workstation 12. I have the same error within Internet explorer and Chrome. I have tried uploading the tutorial data when copied locally within the Win12 instance or from a share folder located on my Windows 10 PC running as the Host (where VM workstation is running from).

Re: Tutorial data upload error

ChrisG — Mon, 22 Feb 2016 19:20:03 GMT

Thanks for the additional information. I have added it to the existing bug report (SPL-109362).

Re: Tutorial data upload error

lstewart_splunk — Mon, 22 Feb 2016 19:27:00 GMT

Also, please ensure that the file is in a directory that does not have spaces in the file path.
Try moving the tutorialdata.zip file to your desktop or to c:\, then attempt the upload again.

Re: Tutorial data upload error

becksyboy — Wed, 24 Feb 2016 22:24:40 GMT

Hi Chris, forgot to add the Splunk version I'm running is 6.3.

I created a CentOS-7 Vm instance within VM Workstation 12, and have managed to upload the tutorial data with no issues.

Re: Tutorial data upload error

ChrisG — Wed, 24 Feb 2016 23:35:41 GMT

Thanks for confirming that this is the Windows bug again, and I am glad you were able to upload the data and proceed on Linux.

Re: Tutorial data upload error

piebob — Mon, 09 May 2016 14:16:53 GMT

I downvoted this post because the person didn't ask how to upload the file, he reported an error when he did.

Re: Tutorial data upload error

lstewart_splunk — Mon, 09 May 2016 15:37:28 GMT

I downvoted this post because you should not unzip the tutorialdata file. splunk uncompresses the zip file when the file is uploaded. also, as i mentioned in my reply below, try moving the zip file to the root directory, such as c:\, and then upload the file into splunk.

Re: Tutorial data upload error

louisba — Wed, 24 May 2017 04:51:44 GMT

I am having the same issue uploading the tutorialdata zip file into Splunk. I am using Windows 8.1. I am also new to Splunk and needs the data to practice so I can move to the next level.
Is there a solution? I followed exactly the documentation. Any assistance would be greatly appreciated.

Thank you in advance!

Re: Tutorial data upload error

lstewart_splunk — Thu, 25 May 2017 00:14:39 GMT

louisba, see my answer below.

Re: Tutorial data upload error

lstewart_splunk — Thu, 25 May 2017 00:18:47 GMT

If the system hangs when you try to upload the file, try the following.

DO NOT unzip the file.
Stop the upload.
Go to Settings > Server settings > General settings.
In the Index settings section, change the value of the parameter Pause indexing if free disk space (in MB) falls below. Change the value to approx. 200 MB lower than the current value. For example, if the setting is 5000, change it to 4800.
Try the upload again.

Re: Tutorial data upload error

louisba — Thu, 25 May 2017 03:08:01 GMT

I just tried as explained and still got the same error message: "Upload failed with ERROR: Read Timeout." There was a previous warning though as soon as I chose the file stating: "Preview is not supported by this archive file, but it can still be indexed".
Thank you for trying! It seems to be a known issue.

Re: Tutorial data upload error

Kamalam1993 — Wed, 19 Jul 2017 14:34:58 GMT

Hi Chris,
I am facing "Upload failed with ERROR : Read Timeout", while uploading the tutorial data. I have tried to install the unzipped file, but it is throwing the same error message. I am using chrome and OS is windows 7. I have tried to change the pause indexing to 4800 too. Is there any upload defect on Windows 7?

Re: Tutorial data upload error

ChrisG — Wed, 19 Jul 2017 14:53:46 GMT

Yes, the defect is still open. As a workaround, I suggest using a free Splunk Cloud trial to go through the tutorial.

Re: Tutorial data upload error

louisba — Wed, 19 Jul 2017 19:18:24 GMT

Re-install Splunk and try to upload the zip file again. Your free license may have expired.

Re: Tutorial data upload error

lstewart_splunk — Thu, 20 Jul 2017 18:55:30 GMT

@kamalam1993 - when you changed the pause indexing threshold to 4800, did you then try to upload the unzipped files? You definitely don't want to do that. You want to upload the zipped files.