Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Upload txt file - metafields source and sourcetype not searchable

$
0
0
Hello, i just uploaded a txt file with some logs, through GUI Add data ->upload. Data is indexed, and I can search it by typing index = test I can see that all metafields like source and sourcetype has been assigneged according to my settings, but.... when i search for source = my_source or sourcetype = mylogfile.txt i get zero results..... I know that no stanzas are generated in inputs.conf when you upload a file, but is it normal behaviour in case of uploading files?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>