Getting Data In

How to manually upload logs in a zip file to a Splunk indexer cluster?

kiran331
Builder

Hi

I want to manually upload the log files in a zip file into a cluster environment with 3 indexers. How to do it?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.