Related Answers
Download topic as PDF
Upload data
The Upload page lets you upload a file to your Splunk Enterprise instance from your computer. You can upload files by clicking the "Upload" button from Splunk Home in Splunk Web.
Caveats for Windows Event Log files and the upload feature
While you can upload any file to Splunk Enterprise or Splunk Cloud, Windows Event Log (.evt) and Windows Event Log XML (.evtx) files that you exported from another Windows machine don't work with the upload feature because those files contain information that is specific to the Windows machine that generated them. Other machines can't process the files in their unaltered form. See Index exported event log files for more information about the constraints for working with these kinds of files.
The Upload page
- Upload data through one of the following methods on this page:
- Drag the file you want to index from your desktop to the Drop your data file here area.
- Click Select File and select the file that you want to index.
- Splunk Enterprise then loads the file and processes it, depending on what type of file it is.
- After the file has completed loading, click Next.
Next step
|
PREVIOUS How do you want to add data? |
NEXT Monitor data |
This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1, 8.1.2, 8.1.3
Feedback submitted, thanks!