Dashboards & Visualizations

How to add zip file containing xml Log data

20065945
Explorer

Hi I have 2 zip file that I want to add into Splunk.
1 is of 50 GB containing three folders that are filled with XML log files
other is a normal file that is containing XML files...no folders

How can I add these two files in Splunk...Pls suggest

Tags (4)
0 Karma
1 Solution

strive
Influencer

The getting data in manual explains different ways to get data into your splunk instance.
If it is going to be one time data input then you can make use of Splunk Web
http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/UseSplunkWeb

You can also place the files in some directory and configure your splunk instance to monitor that directory.

If you have any doubts on what kind of data splunk indexes. Here it is: Splunk Enterprise decompresses archive files before it indexes them. It can handle these common archive file types: tar, gz, bz2, tar.gz, tgz, tbz, tbz2, zip, and z.
More information at: http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/Monitorfilesanddirectories

Follow similar related questions
alt text

View solution in original post

strive
Influencer

The getting data in manual explains different ways to get data into your splunk instance.
If it is going to be one time data input then you can make use of Splunk Web
http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/UseSplunkWeb

You can also place the files in some directory and configure your splunk instance to monitor that directory.

If you have any doubts on what kind of data splunk indexes. Here it is: Splunk Enterprise decompresses archive files before it indexes them. It can handle these common archive file types: tar, gz, bz2, tar.gz, tgz, tbz, tbz2, zip, and z.
More information at: http://docs.splunk.com/Documentation/Splunk/6.1.2/Data/Monitorfilesanddirectories

Follow similar related questions
alt text

strive
Influencer

Under Related questions section on the right side you have many links which you can refer to. Make use of those links.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...