Getting Data In

Upload File vs. Index-once Monitor File

Contributor

upload vs monitor file (index once)

Would like to get some enlightenment on what's the difference between the two. TIA

0 Karma
1 Solution

Splunk Employee
Splunk Employee

Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

Upload would be for data that is on your local machine, while the monitor / index once option would be if the data is local to Splunk.

View solution in original post

0 Karma

Contributor

I understand tho that once I upload, say for example a CSV file, using Add Data > Upload OR Add Data > Monitor > Files & Directories > Index Once they're both written on the disk where Splunk deployed (as long as I use the same index). Is that right?

0 Karma