Getting Data In

Can I ingest JSON file into an index

cherrypick
Path Finder

Hi,

I have a python modular input that populates an index (index_name). This ran into some gateway error issues causing some data to be missing in the index. Is it possible to ingest a JSON file containing the missing data directly into the index (index_name)?

 

Thanks, 

Labels (2)
0 Karma
1 Solution

kiran_panchavat
SplunkTrust
SplunkTrust

@cherrypick 

If this is a one-time ingestion of the missing data, the simplest method is to use the Splunk Web UI to upload the JSON file directly into your index_name.  In the "Input Settings" step, set the Index field to index_name (your existing index). Review the configuration, then click Submit to ingest the file into index_name.
 
 
 
Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

View solution in original post

kiran_panchavat
SplunkTrust
SplunkTrust

@cherrypick 

If this is a one-time ingestion of the missing data, the simplest method is to use the Splunk Web UI to upload the JSON file directly into your index_name.  In the "Input Settings" step, set the Index field to index_name (your existing index). Review the configuration, then click Submit to ingest the file into index_name.
 
 
 
Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...