I am having difficulties to get Splunk to ingest gzipped logs files from an S3 bucket, the files itself do not have extensions and Splunk is reading them as binaries. I tried archive_cmd to auto, gunzip -c, gzip -d in props.conf with no luck [source::/xxx/*] unarchive_cmd = gunzip -c NO_BINARY_CHECK = true gunzip -c works in shell, gzip -d doesn't without gz suffix *using AWS addon due to the nature of the environment, the files can't be renamed. Anyone experienced this before? ... View more