The following screen appears where you can review your input settings. Type \(.*)/ for the regex to extract the host values from the path. Splunk Enterprise for Linux or Mac OS X a. The setting that you specify depends whether you are using Splunk Cloud Platform or Splunk Enterprise, and on the operating system that you are using. Under Input Settings, you can override the default settings for Host, Source type, and Index.īecause this tutorial uses a ZIP file, you are going to modify the Host setting to assign the host values by using a portion of the path name for the files included in the ZIP file.Click Next to continue to Input Settings.When you load data that is not in a compressed file, you will be asked to set the data source type. The Set Source Type step in the Add Data wizard is skipped. In your download directory, select the tutorialdata.zip file and click Open.īecause you specified a compressed file, the Splunk software recognizes that type of data source.

Under Select Source, click Select File.There are other options for adding data, but for this tutorial you will upload the data files. At the bottom of the window, click Upload.If there is a Welcome window displayed, close that window.It is helpful to understand the type of data you that are uploading with this tutorial.See Download the tutorial data files for more information. Some browsers automatically uncompress ZIP files. The tutorialdata.zip file must remain compressed to upload the file successfully.You must have the tutorial data files on your computer.Using the tutorial data ensures that your search results are consistent with the steps in the tutorial. This tutorial uses a set of data that is designed to show you the features in the product.

Download ToDoList 8.2.6