Getting Data In

How to manually upload logs in a zip file to a Splunk indexer cluster?

kiran331
Builder

Hi

I want to manually upload the log files in a zip file into a cluster environment with 3 indexers. How to do it?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can upload a file using the Add Data wizard in Splunk Web. You can read About uploading data in the Search Tutorial for a walkthrough.

If you have index clustering, you don't need to do anything extra. Quoting from About index clusters and index replication in the Managing Indexers and Clusters of Indexers manual:

The peer nodes receive and index incoming data, just like non-clustered, stand-alone indexers. Unlike stand-alone indexers, however, peer nodes also replicate data from other nodes in the cluster. A peer node can index its own incoming data while simultaneously storing copies of data from other nodes.

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...