Getting Data In

Is it possible to download files that I uploaded to Splunk via "Add data" from my computer?

Builder

I used the 'Add data' link in Settings to upload csv files.

I would like to get those original files. Is it possible?

Thanks.

0 Karma

SplunkTrust
SplunkTrust

Files uploaded for indexing are not stored in their original form and cannot be downloaded. You can, however, create a search to collect the data from that file and then export it in CSV format. A sample search would be index=foo source=myFile | table <fields in the original file>. Once you have the table looking the way you want it, click the export icon and fill in the dialog box to create a CSV file.

---
If this reply helps you, an upvote would be appreciated.

SplunkTrust
SplunkTrust

You can do a Splunk search and export the files as a CSV file

0 Karma