Getting Data In

How to index data ?

jigneshjsoni71
New Member

In Splunk, I am running a query in search bar and its returning results.

In reply to one of the question , I was replied "You need to index data first"

How can I index data ?
Thanks

Tags (1)
0 Karma

ppablo
Retired

Hi @jigneshjsoni71

Are you looking for the "Getting Data In" manual in Splunk documentation?

http://docs.splunk.com/Documentation/Splunk/6.1.3/Data/WhatSplunkcanmonitor

0 Karma

ppablo
Retired

Hi @jigneshjsoni71

I just read through the previous questions you posted and you definitely need to go through the Search Tutorial before jumping into anything else at this point. Since no one on your team knows anything about Splunk, they are just going to have to wait until you get caught up to speed starting from the basics. Splunk is an awesome tool to use in any organization that deals with machine data, but it's not just some simple platform to master over night. There are great folks here that can help you (and want to help you), but you have to use the recommended resources first.

aweitzman
Motivator

Yes, having data in Splunk is the same thing as Splunk indexing the data. Two ways of saying the same thing.

Please read the documentation links listed above. While the Add Data button (which should be on the Settings/Data Inputs page) is one way of getting data into Splunk (also known as having Splunk index your data), there are many others.

0 Karma

jigneshjsoni71
New Member

Yes, this is first time I am working on Splunk

I am trying to understand, how can I index data.
Does not indexing of data happen by itself ? When I am running a query in search bar of Splunk, I am getting results. If data was indexed, would the results be any different ? How can I index data ?
When I go on Splunk web, I dont get "Add Data" link. Does it mean that Splunk UI is customized and "Add data" link is taken out ? If thats the case, how does data get indexed ?
Thanks

0 Karma

ppablo
Retired

If this is your first time installing and running Splunk, I'd highly recommend going through the Search Tutorial first.

http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchTutorial/WelcometotheSearchTutorial

There is tutorial data available for download in this documentation to help get you familiarized as well.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...