I'm currently preparing for the Splunk Custom Data Load for completion of the Sales Engineer 2 certification. The directions say that I need to use a data set that will not load using the default settings in Splunk (i.e. I will need to edit config files to allow for the data to be ingested).
So my question is: what types of data should I look to use? Every data set I find seems to come in a form that Splunk will automatically ingest.
Any suggestions are greatly appreciated!
... View more