Getting Data In

Is it possible to download files that I uploaded to Splunk via "Add data" from my computer?

splunkreal
Motivator

I used the 'Add data' link in Settings to upload csv files.

I would like to get those original files. Is it possible?

Thanks.

* If this helps, please upvote or accept solution if it solved *
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Files uploaded for indexing are not stored in their original form and cannot be downloaded. You can, however, create a search to collect the data from that file and then export it in CSV format. A sample search would be index=foo source=myFile | table <fields in the original file>. Once you have the table looking the way you want it, click the export icon and fill in the dialog box to create a CSV file.

---
If this reply helps you, Karma would be appreciated.

skoelpin
SplunkTrust
SplunkTrust

You can do a Splunk search and export the files as a CSV file

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...