- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

morethanyell
Builder
08-17-2018
12:12 AM
Would like to get some enlightenment on what's the difference between the two. TIA
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

kmorris_splunk

Splunk Employee
08-17-2018
06:47 AM
Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

kmorris_splunk

Splunk Employee
08-17-2018
06:47 AM
Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

morethanyell
Builder
08-19-2018
05:14 PM
I understand tho that once I upload, say for example a CSV file, using Add Data > Upload OR Add Data > Monitor > Files & Directories > Index Once they're both written on the disk where Splunk deployed (as long as I use the same index). Is that right?
