topic Re: How can I take csv from the client (Windows 10) in Getting Data In

How can I take csv from the client (Windows 10)

leov123 — Mon, 20 May 2019 09:03:24 GMT

Already install the splunk server at Linux.

Linux: Red Hat 7
Splunk: 6.6.0 Splunk Free

I want take csv file from windows 10 and input it to my Linux splunk server.
I'm too stupid in learning system...…..although I spend all day to read the docs, don't know how to do.

Please tell me how can I do it by steps...…….

Re: How can I take csv from the client (Windows 10)

esix_splunk — Mon, 20 May 2019 09:24:31 GMT

There are a few ways you can do this.

The easiest is probably to upload the CSV file to your Splunk server via the Add Data wizard when you login to the GUI. This is very easy to do, perhaps you have already read this : https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/Howdoyouwanttoadddata

This also outlines other methods to GDI (get data in) to Splunk.

Another option would be to oneshot the data into Splunk from the Windows 10 machine. Check the docs here also for more information and examples : https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/MonitorfilesanddirectoriesusingtheCLI#Example_4:_Upload_a_file

Cheers
Eric

Re: How can I take csv from the client (Windows 10)

leov123 — Mon, 20 May 2019 09:43:33 GMT

Thanks for your answer.

I already setup splunk forwarder in my windows 10, and setting it all.

Both of My client and server, I type the "ping" , "netstat" commands to check the ip and port ( In my case, use 8089 / 9998).
It's work.....

And the firewall/iptables of Linux and Windows, already opened.

After 2 days, the splunk web cannot see any data in "index=" or "source=" of search.

Not only in restart system, reboot computer, reboot switch.

My splunk web still silly just like me. It's empty.

At last, I try csv. I hope it work...……

Thank you.