topic Re: Splunk Fundamental Module 4 Lab in Getting Data In

Splunk Fundamental Module 4 Lab

supyaetun — Fri, 12 Mar 2021 08:24:24 GMT

After uploading the 3 files as per the instructions, I am supposed to see my events but there is nothing on the page even when I am logged in as admin or power user.

Re: Splunk Fundamental Module 4 Lab

aasabatini — Fri, 12 Mar 2021 11:37:34 GMT

Hi,

try to expand your timerange and if you don't specify the index name splunk automatically puts your data on the index=main.

Re: Splunk Fundamental Module 4 Lab

etmaurer — Fri, 16 Jul 2021 18:00:54 GMT

Same here...uploaded 3 files into Splunk w/o issue but they don't appear as having been so as nothing to search upon. Expanded data to "all time" as well.

Ed in Tampa

Re: Splunk Fundamental Module 4 Lab

etmaurer — Mon, 19 Jul 2021 19:40:21 GMT

Ok, found an email address to Splunk Education team (elearn@splunk.com) ...and submitted my question; here is the response:

"Hello Ed,

You may proceed to the next module/lab. The information indicating the number of events to indexed does not appear on this page in this version of Splunk.

Mike Halladay

IOD Technical Support Engineer"

I have since been able to perform a search & find data from these 3 lab files. BTW, I'm running the Windows version on my desktop.

Hope this helps somebody, I could have used this guidance last week.

Ed in Tampa