Uploading flat/sequential file

[petem3]

I'm trying to upload an ascii file (created on a IBM mainframe) into splunk using the lookup - add new lookup table file option.

Its not a CSV format, just text with no comma separated fields (also known as a flat/sequential file).

I'm getting the following error :-

"Encountered the following error while trying to save: File is binary or file encoding is not supported, only utf-8 encoded files are supported".

Am i using the correct option to get the data into splunk, if yes, how do i overcome the error?

[petem3]

Thanks for the speedy response.

Ultimately i would like to index the file, but currently just trying to ingest into splunk and have a play around with it.

[richgalloway]

For simple data ingestion, use the Add Data wizard at Settings->Add Data.

[richgalloway]

Make sure the file uses the UTF-8 character set.  Remove any non-printable characters.  IBM has a history of not supporting ASCII well so the file may not be what you think it is.

A file without commas will not work as a Splunk lookup file.

To know if you're using the correct option requires knowing what you're trying to accomplish.  What do you want to do with this file?  Do you want to index it, make it into a lookup file, or something else?