How can I take csv from the client (Windows 10)

[leov123]

Already install the splunk server at Linux.

Linux: Red Hat 7
Splunk: 6.6.0 Splunk Free

I want take csv file from windows 10 and input it to my Linux splunk server.
I'm too stupid in learning system...…..although I spend all day to read the docs, don't know how to do.

Please tell me how can I do it by steps...…….

[esix_splunk · Accepted solution]

There are a few ways you can do this.

The easiest is probably to upload the CSV file to your Splunk server via the Add Data wizard when you login to the GUI. This is very easy to do, perhaps you have already read this : https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/Howdoyouwanttoadddata

This also outlines other methods to GDI (get data in) to Splunk.

Another option would be to oneshot the data into Splunk from the Windows 10 machine. Check the docs here also for more information and examples : https://docs.splunk.com/Documentation/Splunk/7.2.6/Data/MonitorfilesanddirectoriesusingtheCLI#Exampl...

Cheers
Eric

[leov123]

Thanks for your answer.

I already setup splunk forwarder in my windows 10, and setting it all.

Both of My client and server, I type the "ping" , "netstat" commands to check the ip and port ( In my case, use 8089 / 9998).
It's work.....

And the firewall/iptables of Linux and Windows, already opened.

After 2 days, the splunk web cannot see any data in "index=" or "source=" of search.

Not only in restart system, reboot computer, reboot switch.

My splunk web still silly just like me. It's empty.

At last, I try csv. I hope it work...……

Thank you.