topic Saved Logs in Getting Data In

Saved Logs

garymilam72 — Thu, 13 Jun 2019 03:13:06 GMT

Can I tell SPLUNK to view logs from a file with saved logs? For example, I save logs from another system to C:\Logs.

Re: Saved Logs

richgalloway — Sun, 16 Jun 2019 14:41:36 GMT

Splunk can ingest any text file, even if it came from another system. This is done often with syslog data. Just tell Splunk to monitor the file that contains the data.

Re: Saved Logs

VatsalJagani — Sun, 16 Jun 2019 14:50:46 GMT

@garymilam72 - From Splunk's home page you can directly upload a file or from Settings > Inputs > Files and Directory you can monitor file or directory.

Re: Saved Logs

garymilam72 — Sun, 16 Jun 2019 23:24:07 GMT

If I add a new file every week will only monitor new files

Re: Saved Logs

richgalloway — Fri, 21 Jun 2019 11:25:36 GMT

Splunk monitors for new data in every file or directory it's told to monitor.