How does one upload files larger than 500mb? I get an error "File too large. The file selected is 996Mb. Maximum file size is 500Mb" Is this due to using the trial ?
The 500MB limit is for uploading file from Splunk Web, regardless of the license type.
View solution in original post
I've had the same problem. You can use the Linux SPLIT command to break the file up into smaller parts
Yes, both the trial and free licenses have an indexing limit of 500MB a day. For file upload on any license, the maximum file size is 500 MB, as the UI indicates.
Thanks - Is there a way around this without using the Web, not splitting the file ?
I don't think so but you could try using the universal forwarder instead of uploading the file
Is it possible to zip the file so it is less than 500MB?
Figured it out with the CLI.. did a oneshot monitor. http://docs.splunk.com/Documentation/Splunk/6.4.2/Data/MonitorfilesanddirectoriesusingtheCLI
Ah good to know, haven't used that before