Hi everyone!
I recently installed splunk and ingested botsv3 dataset through mentioned /etc/apps and gui too. The botsv3 README.md mentions they have source types like aws:cloudtrial & hardware etc, but i coun't able to find any of these sourcetype.
While ingesting, I copiled whole folder of extracted botsv3.tar.gz inside /etc/apps and same for Data Input gui too.
Can you help me figure out a suitable solution to these?available sourcetypes
Thank you so much.
What do you mean by "ingested"? The dataset is preindexed data. You're not supposed to ingest it. It's already been ingested and indexed.