indexing data with importutil

[toumii]

Hi everyone,

I am trying to index using http. I used importutil. But I think i'm misusing it, since I can't figure how to index data shown by the command (importutil). Here's what I did:

|importutil http (url)

Tha data is shown but not indexed.

Thank you very much for helping

[martin_mueller · Accepted solution]

According to the documentation at https://splunkbase.splunk.com/app/1311/#/documentation importutil doesn't index anything, it provides input to build lookup files.

Consider using the REST modular input: https://splunkbase.splunk.com/app/1546/