topic Re: file upload in Splunk Search

file upload

srajanbabu — Wed, 23 Oct 2013 14:28:21 GMT

I deleted an uploaded file"C:\Data\acctdata\snm4-logger.log" but when i am trying to upload it again after renaming it, i couldn see that file in summary page.So i checked in manager->data inputs,there i found that file .I opened that file i m a getting a notepad opened with the following message as

{"msg": "Successfully updated \"C:\Data\2013\Splunk\FTPLOG.log\". ", "redirect": "/en-US/manager/search/data/inputs/monitor?redirecting=true&msgid=1520000.788126835839&ns=search", "status": "OK"}

i proceeded with saving the file.but no progress from there.

Re: file upload

ShaneNewman — Thu, 24 Oct 2013 03:17:21 GMT

You may want to add crcSalt = to your inputs.conf file for that particular input.

Re: file upload

srajanbabu — Thu, 24 Oct 2013 08:33:56 GMT

still it is not working.Could you please suggest some other answer.

Re: file upload

ShaneNewman — Thu, 24 Oct 2013 17:52:26 GMT

command line out to the splunk bin directory. Stop splunk, run "splunk clean eventdata -index _thefishbucket"

That will tell splunk to start over from an indexing perspective, meaning it will see the file as new.

Let me know if that works.

Re: file upload

ShaneNewman — Tue, 29 Oct 2013 00:00:00 GMT

Any luck getting that to work?

Re: file upload

hberde — Tue, 27 Feb 2018 19:41:38 GMT

Can we load the file in splunk by cloud version? and do we need to restart the splunk services after every config change?