https://community.splunk.com/t5/Getting-Data-In/Indexing-live-XML-data-from-large-files/m-p/432359#M75633 <P>We are having Splunk Enterprise version(7.1.0) for reading data from different indexes.</P> <P>But we have been provided large XML files from an eStore Application which are having live data.<BR /> SPLUNK will have to index that live data and generate alerts based on the configured reports</P> <P>Could you anyone kindly suggest if similar level of work has been done in any project in within TCS.</P> Mon, 05 Aug 2019 10:57:11 GMT aritratony 2019-08-05T10:57:11Z https://community.splunk.com/t5/Getting-Data-In/Indexing-live-XML-data-from-large-files/m-p/432359#M75633 <P>We are having Splunk Enterprise version(7.1.0) for reading data from different indexes.</P> <P>But we have been provided large XML files from an eStore Application which are having live data.<BR /> SPLUNK will have to index that live data and generate alerts based on the configured reports</P> <P>Could you anyone kindly suggest if similar level of work has been done in any project in within TCS.</P> Mon, 05 Aug 2019 10:57:11 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-live-XML-data-from-large-files/m-p/432359#M75633 aritratony 2019-08-05T10:57:11Z https://community.splunk.com/t5/Getting-Data-In/Indexing-live-XML-data-from-large-files/m-p/432360#M75634 <P>if the files are getting stored in some location and you know the server path down to the folder, you can try the usual forwarder approach.<BR /> Your best option is to try using the heavy forwarder at the file location</P> Mon, 05 Aug 2019 17:27:40 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-live-XML-data-from-large-files/m-p/432360#M75634 Sukisen1981 2019-08-05T17:27:40Z