Getting Data In

Can I ingest JSON file into an index

cherrypick
Path Finder

Hi,

I have a python modular input that populates an index (index_name). This ran into some gateway error issues causing some data to be missing in the index. Is it possible to ingest a JSON file containing the missing data directly into the index (index_name)?

 

Thanks, 

Labels (2)
0 Karma
1 Solution

kiran_panchavat
SplunkTrust
SplunkTrust

@cherrypick 

If this is a one-time ingestion of the missing data, the simplest method is to use the Splunk Web UI to upload the JSON file directly into your index_name.  In the "Input Settings" step, set the Index field to index_name (your existing index). Review the configuration, then click Submit to ingest the file into index_name.
 
 
 
Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

View solution in original post

kiran_panchavat
SplunkTrust
SplunkTrust

@cherrypick 

If this is a one-time ingestion of the missing data, the simplest method is to use the Splunk Web UI to upload the JSON file directly into your index_name.  In the "Input Settings" step, set the Index field to index_name (your existing index). Review the configuration, then click Submit to ingest the file into index_name.
 
 
 
Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...