topic Re: Uploading flat/sequential file in Getting Data In

Uploading flat/sequential file

petem3 — Tue, 09 Mar 2021 14:39:58 GMT

I'm trying to upload an ascii file (created on a IBM mainframe) into splunk using the lookup - add new lookup table file option.

Its not a CSV format, just text with no comma separated fields (also known as a flat/sequential file).

I'm getting the following error :-

"Encountered the following error while trying to save: File is binary or file encoding is not supported, only utf-8 encoded files are supported".

Am i using the correct option to get the data into splunk, if yes, how do i overcome the error?

Re: Uploading flat/sequential file

richgalloway — Tue, 09 Mar 2021 18:20:53 GMT

Make sure the file uses the UTF-8 character set. Remove any non-printable characters. IBM has a history of not supporting ASCII well so the file may not be what you think it is.

A file without commas will not work as a Splunk lookup file.

To know if you're using the correct option requires knowing what you're trying to accomplish. What do you want to do with this file? Do you want to index it, make it into a lookup file, or something else?

Re: Uploading flat/sequential file

petem3 — Thu, 11 Mar 2021 10:52:59 GMT

Thanks for the speedy response.

Ultimately i would like to index the file, but currently just trying to ingest into splunk and have a play around with it.

Re: Uploading flat/sequential file

richgalloway — Thu, 11 Mar 2021 15:07:25 GMT

For simple data ingestion, use the Add Data wizard at Settings->Add Data.