Getting Started Manual

About adding data to Splunk Light

This section discusses options for getting data into Splunk Light. You can add data inputs from files and directories, network ports, scripted inputs, and from Splunk universal forwarders.

When you add data, the indexer processes it and stores it in an index. Indexes reside in flat files on your Splunk Light instance. By default, data you feed to an indexer is stored in the main index, but you can create and specify other indexes for different data inputs.

The Add Data page

There are different options for getting data into Splunk Light. Use the Add Data page to upload, monitor, or forward data. You can also configure an Add-on to add data to Splunk Light.

Upload

The Upload option lets you upload a file or archive of files for indexing. When you click Upload, Splunk Web goes to a page that starts the upload process. See:

• Upload a file to Splunk Light in the Getting Started Manual.
• About source types and input settings for Splunk Light in the Getting Started Manual.

Monitor

The Monitor option lets you monitor one or more files, directories, network streams, scripts, Event Logs (on Windows hosts only), performance metrics, or any other type of machine data that the Splunk Light instance has access to. When you click Monitor, Splunk Web loads a page that starts the monitoring process. See:

• Monitor files and directories using Splunk Light in the Getting Started Manual.
• Monitor network ports using Splunk Light in the Getting Started Manual.

Note: The Splunk Light cloud service does not support monitoring inputs.

Forward

The Forward option lets you receive data from forwarders into your Splunk Light instance. When you click the "Forward" button, Splunk Web takes you to a page that starts the data collection process from forwarders. The Forward option requires configuration of a universal forwarder before the Forwarder page is populated. See:

• Forward data to Splunk Light using Microsoft Windows in the Getting Started Manual.
• Forward data to Splunk Light using Linux in the Getting Started Manual.
• Forward data to Splunk Light using Mac OS in the Getting Started Manual.

Check the status of configured forwarders:

• Check the status of forwarders in Splunk Light in the Getting Started Manual.

Use an Add-on to add data

To use an add-on to add data to Splunk Light, see Configure an Add-On to add data in Splunk Light in the Getting Started Manual.