Getting Data In

Saved Logs

garymilam72
New Member

Can I tell SPLUNK to view logs from a file with saved logs? For example, I save logs from another system to C:\Logs.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk can ingest any text file, even if it came from another system. This is done often with syslog data. Just tell Splunk to monitor the file that contains the data.

---
If this reply helps you, Karma would be appreciated.
0 Karma

garymilam72
New Member

If I add a new file every week will only monitor new files

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk monitors for new data in every file or directory it's told to monitor.

---
If this reply helps you, Karma would be appreciated.
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@garymilam72 - From Splunk's home page you can directly upload a file or from Settings > Inputs > Files and Directory you can monitor file or directory.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...