I am trying to be an admin for a separate work project. But our original admin has been out of town for a few weeks, so I am unable to ask him before my deadline. I was trying to get this sample project done..
I have TXT file logs that I transfer over to Excel CSV sheets, and i use the first line as the field names, and the columns for each field have a flow of data.
When I upload the the CSV to Splunk, all I am getting is a 100% bar but it is gray. When I upload the sample logs from Splunk, the bar goes green.
Do you have any tips on making the data acceptable. My Excel sheet looks almost identical to Splunk's sample sheets but my data does not confirm with a green bar.
First, save as your excel file in CSV file and then open it into notepad++ or any text editor to verify it. If your data having a comma as a value then make sure you need to select different separator as csv data separator, like pipe.
After creating proper csv file upload into splunk
Make sure that you do
Save As in
Excel and select
DOS CSV or
Windows CSV or even
plain text. Then open the file with
Notepad++ and make sure that it looks the way that it should. Then upload this version if the file.
Did the answer below solve your problem? If so, please resolve this post by approving it!
If your problem is still not solved, keep us updated so that someone else can help ya.
Thanks for posting!
Splunk Can Not index Excel files as those contain binary (propitiatory formatted) data.
save your files as
.csv and enjoy Splunk power
more related answers here:
I converted a txt document to an excel spreadsheet and saved it as .csv. inside excel.
The downloaded test data that Splunk provides is Excel .csv
When you upload my document the percentage bar will go to a 100% but it is grayed.
When you upload Splunks excel sheet it goes 100% green.
Is it due to the fact that they are in zipped csv files?