topic Re: Ingested data not fond in Getting Data In

Ingested data not fond

RB1 — Fri, 21 May 2021 22:20:52 GMT

Hello,

I am doing the Splunk Fundamentals module 4 lab. After ingesting the data it's nowhere to be found. Please help.

Re: Ingested data not fond

aasabatini — Mon, 24 May 2021 07:50:30 GMT

Hi @RB1

try to expand your timerange on your searchbar.

please check the inputs stanza to verify where are stored your data.

if didn't help please add more details

Regards

Alessandro

Re: Ingested data not fond

RB1 — Tue, 25 May 2021 22:28:42 GMT

Expanding the search will help me find what I uploaded, but it does not appear when clicking the the Search and Reporting app sidebar. When I log in as a power user nothing appears when clicking the the Search and Reporting app sidebar. Nothing is found using the expanded search logged in as the power user.

Re: Ingested data not fond

RB1 — Tue, 25 May 2021 23:43:31 GMT

Logged in as Admin, the What to Search information is not displayed, nor is there a place to display any What to Search information.

Analyze Your Data with Table Views (New!) is displayed where the What to Search information should be displayed.

Re: Ingested data not fond

RB1 — Thu, 27 May 2021 01:42:25 GMT

in the SplunkFundamentals1_module4 Steps 35 – 37 state that the “What to Search” summary of indexed events will appear to the right when clicking the Search and Reporting App from the side bar to the left. The “What to Search” summary is not displayed. “Analyze Your Data with Table Views New!” is shown where the “What to Search” summary should be displayed. The next lab uses this same “What to Search” summary for it.

Re: Ingested data not fond

RB1 — Thu, 27 May 2021 01:43:06 GMT

Please help