The Upload page lets you upload a file to your Splunk Enterprise instance from your computer. You can upload files by clicking the "Upload" button from Splunk Home in Splunk Web.
Caveats for Windows Event Log files and the upload feature
While you can upload any file to Splunk Enterprise or Splunk Cloud, Windows Event Log (.evt) and Windows Event Log XML (.evtx) files that you exported from another Windows machine don't work with the upload feature because those files contain information that is specific to the Windows machine that generated them. Other machines can't process the files in their unaltered form. See Index exported event log files for more information about the constraints for working with these kinds of files.
The Upload page
- Upload data through one of the following methods on this page:
- Drag the file you want to index from your desktop to the Drop your data file here area.
- Click Select File and select the file that you want to index.
How do you want to add data?
This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1, 8.1.2, 8.1.3