https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353962#M94852 <P>Did you find any solution for this (VPC Flow logs)?</P> Tue, 29 Jan 2019 00:29:07 GMT NetFlow_Logic 2019-01-29T00:29:07Z https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353958#M94848 <P>How to ingest files in S3 buckets that are compressed but do not have .gz extension:<BR /> ie: s3://Blah-main/2018/04/20/16/FlowLogsLogsFirehose-us-east-1-DeliveryStream-1THLU7DASFP74-6-2018-04-20-16-10-40-68617538</P> Fri, 20 Apr 2018 16:59:22 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353958#M94848 etchouako 2018-04-20T16:59:22Z https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353959#M94849 <P>Try to use splunk app for AWS. Refer :<BR /> <A href="https://docs.splunk.com/Documentation/AWS/5.1.0/Installation/S3">https://docs.splunk.com/Documentation/AWS/5.1.0/Installation/S3</A></P> Mon, 23 Apr 2018 04:15:05 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353959#M94849 p_gurav 2018-04-23T04:15:05Z https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353960#M94850 <P>Already using a Splunk App for AWS.</P> Mon, 23 Apr 2018 12:57:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353960#M94850 etchouako 2018-04-23T12:57:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353961#M94851 <P>Did you ever come to a solution on this?</P> <P>I'm also trying to read in an S3 bucket that contains VPC Flow logs. The Splunk App for AWS doesn't seem to realize that they're GZipped data, and it loads in a bunch of garbage text into Splunk instead.</P> Thu, 09 Aug 2018 12:28:11 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353961#M94851 Ricapar 2018-08-09T12:28:11Z https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353962#M94852 <P>Did you find any solution for this (VPC Flow logs)?</P> Tue, 29 Jan 2019 00:29:07 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-input-for-s3-buckets-compressed-file-without-gz-extension/m-p/353962#M94852 NetFlow_Logic 2019-01-29T00:29:07Z