topic Re: Logs are not genarating , root cause is TailReafer in Splunk Enterprise

Logs are not genarating , root cause is TailReafer

anil1432 — Wed, 26 Jan 2022 12:53:07 GMT

Hello everyone, i need a small help

In my search head splunkSRCH637T7.local

If I search for any logs with sourcetype , logs not getting genarating,

Health status of splund is TailReader

Root cause: the monitor input cannot produce data because splunkds processing queues are full . This will be caused by inadequate indexing or forwarding rate, or a sudden burst of incoming data,

COULD ANY ONE PLEASE HELP

PLEASE SEE MY SCREEN SHOT

Re: Logs are not genarating , root cause is TailReafer

SinghK — Wed, 26 Jan 2022 12:59:30 GMT

Please check disk space on indexers. It seems indexers are full.

Re: Logs are not genarating , root cause is TailReafer

SinghK — Wed, 26 Jan 2022 13:02:23 GMT

Additionally look at the link below:

https://community.splunk.com/t5/Splunk-Search/Getting-TailReader-File-descriptor-cache-is-full-100-trimming-in/m-p/224402

Re: Logs are not genarating , root cause is TailReafer

anil1432 — Thu, 27 Jan 2022 07:56:32 GMT

Hello @SinghK

Thanks , but m not sure about this.

Could you plz help me step by step procedure, it will very helpfull to me.

And also I want to confirm , this issue is from splunk forwarder or ?