Create and download or upload a diagnostic file

can create diagnostic files that contain selectable categories of data to help Splunk Support diagnose issues with your deployment. You need an active support case, and credentials for the Support Portal to upload the diagnostic file to Splunk Support. For more information on opening a support case, see the heading Splunk Technical Support in the topic Administer .

Create a diagnostic file

Diagnostic files can be created using the web-based user interface.

From the Home menu, select Administration, then System Health, then Debugging.

1. (Optional) Click the ► symbol next to Advanced.
2. (Optional) Select the checkboxes for the categories you want to include in your diagnostic file; Instance, System, Database, Apps, Filesystem, and Cloud. The default setting includes all sections except filesystem.
3. (Optional) Select the range of logs you want to include in your diagnostic file; All Logs or Recent Logs. The default is All Logs.
4. (Optional) If you want to include ingestion data, make sure the toggle for Include Ingestion data is in the on position. If you do not want to include ingestion data, toggle this setting to the off position.
   1. (Conditional) Set the Number of days of ingestion data to include to control the number of days worth of ingestion data to include. The default value is five days.
5. To download the diagnostic file locally click Download Logs.
6. To upload your diagnostic file and attach it to your support case, click "Upload to Support".
   1. Type your Support Portal username, password, and case number.
   2. Click Login and Upload.

Usernames must be submitted in all lowercase letters.