https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411182#M72815 <P>Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.</P> Fri, 17 Aug 2018 13:47:17 GMT kmorris_splunk 2018-08-17T13:47:17Z https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411181#M72814 <P><span class="lia-inline-image-display-wrapper" image-alt="upload vs monitor file (index once)"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5578i575E7DF68A8DBFE5/image-size/large?v=v2&amp;px=999" role="button" title="upload vs monitor file (index once)" alt="upload vs monitor file (index once)" /></span></P> <P>Would like to get some enlightenment on what's the difference between the two. TIA</P> Fri, 17 Aug 2018 07:12:23 GMT https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411181#M72814 morethanyell 2018-08-17T07:12:23Z https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411182#M72815 <P>Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.</P> Fri, 17 Aug 2018 13:47:17 GMT https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411182#M72815 kmorris_splunk 2018-08-17T13:47:17Z https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411183#M72816 <P>I understand tho that once I upload, say for example a CSV file, using Add Data &gt; Upload OR Add Data &gt; Monitor &gt; Files &amp; Directories &gt; Index Once they're both written on the disk where Splunk deployed (as long as I use the same index). Is that right? </P> Mon, 20 Aug 2018 00:14:17 GMT https://community.splunk.com/t5/Getting-Data-In/Upload-File-vs-Index-once-Monitor-File/m-p/411183#M72816 morethanyell 2018-08-20T00:14:17Z