Splunk Enterprise

Why file encoding is not supported, only utf-8 encoded files are supported splunk?

Simone
Explorer

Hello,

I have installed the splunk enterprise free version on my pc and i have installed the app Splunk app for lookup file edting but unfortunatly doesn't works.

When i try to upload a file .csv i have the following error "File is binary or file encoding is not supported, only utf-8 encoded files are supported splunk".

I tried to change the permission on the app's folder on windows but i did not resolve the problem.

I tested with a very easy csv, and this one is the result:

Simone_0-1690794125363.png

In the csv the column test3,test,test2 were divided. I saved the .csv in all format.

Thanks for the support!

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Open the file with notepad++ to confirm it's truly in CSV format.  If the values are not separated by commas then it's not a CSV file.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The file's encoding has nothing to do with its permissions.  If Splunk finds binary or non-UTF-8 data then the *content* needs to change rather than the access rights.

Similarly, putting ".csv" on the end of a file name does not make the file a CSV file.  It's the *content* that matters.  A CSV file needs to have each column separated from other columns by a comma.  If you create the file using a spreadsheet program like Excel, be sure to save the file in CSV format.  "All" is not a format.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Simone
Explorer

Thanks for the answer.

"All" format means that i tried CSV (MS-Dos), CSV (Macintosh), CSV (comma delimited), etc.

My csv is not separate by comma, it's a simple .csv:

Simone_0-1690812156831.png

I changed the permission after read this topic: https://community.splunk.com/t5/Getting-Data-In/once-more-about-quot-File-is-binary-or-file-encoding...

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Open the file with notepad++ to confirm it's truly in CSV format.  If the values are not separated by commas then it's not a CSV file.

---
If this reply helps you, Karma would be appreciated.

Simone
Explorer

You are right!

i change the configuration on my pc.

Thanks for the support 🙂

Pancho
New Member

Hello, im really lost here and NEED help. What exactly did you configure and where? because no matter what u try i can't get it to save 

 

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...