https://community.splunk.com/t5/Security/how-to-handle-ERROR-ArchiveContext-Decompression-error/m-p/449986#M15478 <P>Hello Splunkers ,</P> <P>Good day </P> <P>I am stuck with one problem where i am monitoring .gz files using UF and getting the data on splunk as expected .<BR /> But when i have checked splunkd.log in that i am seeing below error </P> <P>08-14-2019&nbsp;02:34:43.158&nbsp;-0500&nbsp;ERROR&nbsp;ArchiveContext&nbsp;-&nbsp;From&nbsp;archive='E:\Tanium\Tanium&nbsp;Module&nbsp;Server\services\connect-files\output\SavedQuestion\Splunk-Running-Processes-with-MD5-Hash\Splunk-Running-Processes-with-MD5-Hash_2019-08-13T15-42-22.gz':&nbsp;Decompression&nbsp;error </P> <P>Can anybody suggest how to get rid of it .</P> <P>Thanks in advance</P> <P>Kannu (manish kumar) </P> Wed, 14 Aug 2019 08:26:51 GMT kannu 2019-08-14T08:26:51Z https://community.splunk.com/t5/Security/how-to-handle-ERROR-ArchiveContext-Decompression-error/m-p/449986#M15478 <P>Hello Splunkers ,</P> <P>Good day </P> <P>I am stuck with one problem where i am monitoring .gz files using UF and getting the data on splunk as expected .<BR /> But when i have checked splunkd.log in that i am seeing below error </P> <P>08-14-2019&nbsp;02:34:43.158&nbsp;-0500&nbsp;ERROR&nbsp;ArchiveContext&nbsp;-&nbsp;From&nbsp;archive='E:\Tanium\Tanium&nbsp;Module&nbsp;Server\services\connect-files\output\SavedQuestion\Splunk-Running-Processes-with-MD5-Hash\Splunk-Running-Processes-with-MD5-Hash_2019-08-13T15-42-22.gz':&nbsp;Decompression&nbsp;error </P> <P>Can anybody suggest how to get rid of it .</P> <P>Thanks in advance</P> <P>Kannu (manish kumar) </P> Wed, 14 Aug 2019 08:26:51 GMT https://community.splunk.com/t5/Security/how-to-handle-ERROR-ArchiveContext-Decompression-error/m-p/449986#M15478 kannu 2019-08-14T08:26:51Z