I'm unable to upload any data from tutorial due to the below warning message.I haven't unzip the file but still the problem persist
"Preview is not supported for this archive file, but it can still be indexed"
Hi ChandrikaYalam,
You are actually not unable to upload the data, you uploaded the tutorial data just fine. Your Splunk instance is just telling you that it is not able to show you a preview of the data, because it is zipped. All you need to do is click the big green next button on the screen
and follow the instruction from the docs http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/GetthetutorialdataintoSplunk
Hope this helps ...
cheers, MuS