Getting Data In

How to manually upload logs in a zip file to a Splunk indexer cluster?

kiran331
Builder

Hi

I want to manually upload the log files in a zip file into a cluster environment with 3 indexers. How to do it?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

View solution in original post

Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!