I'm fairly new to Splunk and currently undergoing some training. Within my home lab I have a Splunk instance installed and am trying to upload the tutorial data. When i select the .zip file it says "uploading file" and is at 100%. After 10 mins i get an upload Error stating there was a read timeout?
Any ideas why i can't upload the .zip file?
maybe thats to simple but why don´t you unzip the data first?. Advantage would be that you have a preview, which is not supported for .zip files.
You may want to have a look at the splunk logs. Maybe that will give you more information about the error.
You can find them in $SPLUNK_HOME/var/log/splunk/splunkd.log
I downvoted this post because you should not unzip the tutorialdata file. splunk uncompresses the zip file when the file is uploaded. also, as i mentioned in my reply below, try moving the zip file to the root directory, such as c:\, and then upload the file into splunk.
Also, please ensure that the file is in a directory that does not have spaces in the file path.
Try moving the tutorialdata.zip file to your desktop or to c:\, then attempt the upload again.