Getting Data In

How do I upload a file in Splunk Investigate?

bjanczer_splunk
Splunk Employee
Splunk Employee

How do I upload a file in Splunk Investigate?

0 Karma

pruthvikrishnap
Contributor
0 Karma

bjanczer_splunk
Splunk Employee
Splunk Employee
  1. Log into Splunk Investigate

  2. Go to the "Manage Data" tab

  3. Click on the "Add Data" button

  4. Select a data source. You can bring data into Splunk Investigate by uploading a file, using Universal Forwarder, the HTTP event collector or AWS 3 connector. More connectors will be added shortly.

  5. Select the "Upload file" connector

  6. Drag and Drop the log file into the uploader and add details about the schema of your file such as headers, record delimiters etc

  7. Preview your data. Prepare or Clean your data by Clicking on "Prepare Data".

  8. Successfully Activate your pipeline by choosing the name of the pipeline and Click "Save & Activate"

ChrisG
Splunk Employee
Splunk Employee

For more information, see Upload a static file to your data pipeline in the Splunk Investigate documentation.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...