- Splunk Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Ingested data not fond
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ingested data not fond
Hello,
I am doing the Splunk Fundamentals module 4 lab. After ingesting the data it's nowhere to be found. Please help.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please help
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
in the SplunkFundamentals1_module4 Steps 35 – 37 state that the “What to Search” summary of indexed events will appear to the right when clicking the Search and Reporting App from the side bar to the left. The “What to Search” summary is not displayed. “Analyze Your Data with Table Views New!” is shown where the “What to Search” summary should be displayed. The next lab uses this same “What to Search” summary for it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Logged in as Admin, the What to Search information is not displayed, nor is there a place to display any What to Search information.
Analyze Your Data with Table Views (New!) is displayed where the What to Search information should be displayed.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @RB1
try to expand your timerange on your searchbar.
please check the inputs stanza to verify where are stored your data.
if didn't help please add more details
Regards
Alessandro
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Expanding the search will help me find what I uploaded, but it does not appear when clicking the the Search and Reporting app sidebar. When I log in as a power user nothing appears when clicking the the Search and Reporting app sidebar. Nothing is found using the expanded search logged in as the power user.
Detecting Remote Code Executions With the Splunk Threat Research Team
Observability | Use Synthetic Monitoring for Website Metadata Verification
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
