How to Indexed .gz file in a directory

[ludoz13]

I have a directory with some gz file and when I add this directory, there are nothings to indexed.

In Add Data, I have chosen "Continuously index data from a file or directory this Splunk instance can access" and I have put the right path.

Splunk find the number of file but there are nothing (no new source, host or sourcetype).

Thank for your help !!!

[Ayn · Accepted solution]

Splunk eats gzipped files without problems. Is this data completely new to Splunk or is it something that it has seen before (perhaps in another directory)? If so, you should set crcSalt = <SOURCE> for the input in inputs.conf.

[kdenton]

It can also take a bit of time for the data to show up in Splunk as Splunk looks at these files one at a time as it has to uncompresse each file and ingest it.