I'm fairly new to Splunk and currently undergoing some training. Within my home lab I have a Splunk instance installed and am trying to upload the tutorial data. When i select the .zip file it says "uploading file" and is at 100%. After 10 mins i get an upload Error stating there was a read timeout?
Any ideas why i can't upload the .zip file?
maybe thats to simple but why don´t you unzip the data first?. Advantage would be that you have a preview, which is not supported for .zip files.
You may want to have a look at the splunk logs. Maybe that will give you more information about the error.
You can find them in $SPLUNK_HOME/var/log/splunk/splunkd.log
Also, please ensure that the file is in a directory that does not have spaces in the file path.
Try moving the tutorialdata.zip file to your desktop or to c:\, then attempt the upload again.
I downvoted this post because you should not unzip the tutorialdata file. splunk uncompresses the zip file when the file is uploaded. also, as i mentioned in my reply below, try moving the zip file to the root directory, such as c:\, and then upload the file into splunk.
In order for the tutorial data to work, you should not unzip the file.
What version of Splunk, and what operating system and browser are you using? We have tested the tutorial on multiple platforms, and we did find a file upload defect on Windows 7. We have filed that with the dev team to fix.
I'm running my Splunk instance on a Windows 12 R2 server running within VM Ware workstation 12. I have the same error within Internet explorer and Chrome. I have tried uploading the tutorial data when copied locally within the Win12 instance or from a share folder located on my Windows 10 PC running as the Host (where VM workstation is running from).