Splunk Enterprise

Why file encoding is not supported, only utf-8 encoded files are supported splunk?

Simone
Explorer

Hello,

I have installed the splunk enterprise free version on my pc and i have installed the app Splunk app for lookup file edting but unfortunatly doesn't works.

When i try to upload a file .csv i have the following error "File is binary or file encoding is not supported, only utf-8 encoded files are supported splunk".

I tried to change the permission on the app's folder on windows but i did not resolve the problem.

I tested with a very easy csv, and this one is the result:

Simone_0-1690794125363.png

In the csv the column test3,test,test2 were divided. I saved the .csv in all format.

Thanks for the support!

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Open the file with notepad++ to confirm it's truly in CSV format.  If the values are not separated by commas then it's not a CSV file.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The file's encoding has nothing to do with its permissions.  If Splunk finds binary or non-UTF-8 data then the *content* needs to change rather than the access rights.

Similarly, putting ".csv" on the end of a file name does not make the file a CSV file.  It's the *content* that matters.  A CSV file needs to have each column separated from other columns by a comma.  If you create the file using a spreadsheet program like Excel, be sure to save the file in CSV format.  "All" is not a format.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Simone
Explorer

Thanks for the answer.

"All" format means that i tried CSV (MS-Dos), CSV (Macintosh), CSV (comma delimited), etc.

My csv is not separate by comma, it's a simple .csv:

Simone_0-1690812156831.png

I changed the permission after read this topic: https://community.splunk.com/t5/Getting-Data-In/once-more-about-quot-File-is-binary-or-file-encoding...

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Open the file with notepad++ to confirm it's truly in CSV format.  If the values are not separated by commas then it's not a CSV file.

---
If this reply helps you, Karma would be appreciated.

Simone
Explorer

You are right!

i change the configuration on my pc.

Thanks for the support 🙂

Pancho
New Member

Hello, im really lost here and NEED help. What exactly did you configure and where? because no matter what u try i can't get it to save 

 

0 Karma
Get Updates on the Splunk Community!

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...

Stay Connected: Your Guide to October Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...