Getting Data In

kvstore import - fastest way

jbanAtSplunk
Communicator

what's the fastest way to import into KVStore?
I have about 650 000 rows and import is slow over "Lookup File Editig" app.
Import last Approx. few hours.

Is there any faster way to import into KVStore.

Or do I create new dummy index and then I import into index (will that be faster)

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe you could create temporary csv-file where you read those by input so and then forward those to kvstore with outputlookup command?


r. Ismo

View solution in original post

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe you could create temporary csv-file where you read those by input so and then forward those to kvstore with outputlookup command?


r. Ismo

0 Karma

jbanAtSplunk
Communicator

Tnx. it's working much faster. 
i transfer file to server and then | inputlookup file.csv | outputlookup kvstore

0 Karma

jbanAtSplunk
Communicator

Does not look promising. hitting 10Mb limit, not all data migrated into kvstore.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...