How to manually upload logs in a zip file to a Splunk indexer cluster?

[kiran331]

Hi

I want to manually upload the log files in a zip file into a cluster environment with 3 indexers. How to do it?

[ChrisG · Accepted solution]

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.