Getting Data In

Index zip files with hierarchical folder structure

thirumalreddyb
Communicator

I have a folder with plenty of zip files. Every zip is a zipped folder with folder inside a folder and the deepest folder contains an XML file.

The zip contains file like this;
ZipFolder > src > log > 20160605183045.xml.

The zip files are present in the below location,
D:\BrowniesApp\Logs[zip files present here]

Tags (4)
0 Karma

woodcock
Esteemed Legend

You are going to have to unzip these to get them to work. You would eventually decide to do this anyway because the Archiving Queue is processed with a single-thread which means that it takes FOREVER to forward zip files and it almost always has backups leading to BIG problems. The only solution is to unzip them or install multiple instances of Splunk and partition the sets of files. So setup a cron job to unzip them and copy them somewhere else and have Splunk monitor that other directory (perhaps in batch mode to delete them once forwarded).

0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...