topic Re: Indexing issues in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538208#M18484 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/160645">@bsrikanthreddy5</a>,</P><P>Did you try searching with wider timerange? Or "All Time". There maybe timestamp problem?</P><P>&nbsp;</P> Tue, 02 Feb 2021 04:04:42 GMT scelikok 2021-02-02T04:04:42Z Indexing issues https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538172#M18483 <P>Hi,&nbsp;</P><P>In Splunk's internal log file I can see the log file was processed by Splunk to index, but when I am trying to search the same index from SH, I am not able to find the events. This is happening intermittently on a few of the log files.&nbsp;</P><P>Log from&nbsp; splunkd HF:&nbsp;<BR /><SPAN class="t">INFO</SPAN> <SPAN class="t">TailReader</SPAN> <SPAN class="t">-</SPAN> <SPAN class="t">Batch</SPAN> <SPAN class="t">input</SPAN> <SPAN class="t">finished</SPAN> <SPAN class="t">reading</SPAN> <SPAN class="t">file=</SPAN>'/xx<SPAN class="t a"><SPAN class="t h"><SPAN class="t">/log/xxxxxxx/processed/archive/processed.log_2021-01-20T12:45:01</SPAN>.<SPAN class="t">log'</SPAN></SPAN></SPAN></P><P><SPAN class="t a"><SPAN class="t h"><SPAN class="t">No results from below search with all-time&nbsp;<BR />index=* source="/xxx/log/xxxxxxx/processed/archive/processed.log_2021-01-20T12:45:01.log"</SPAN></SPAN></SPAN></P> Mon, 01 Feb 2021 20:52:52 GMT https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538172#M18483 bsrikanthreddy5 2021-02-01T20:52:52Z Re: Indexing issues https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538208#M18484 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/160645">@bsrikanthreddy5</a>,</P><P>Did you try searching with wider timerange? Or "All Time". There maybe timestamp problem?</P><P>&nbsp;</P> Tue, 02 Feb 2021 04:04:42 GMT https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538208#M18484 scelikok 2021-02-02T04:04:42Z Re: Indexing issues https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538289#M18490 <P>yes, I have used an all-time in time picker.&nbsp;</P> Tue, 02 Feb 2021 14:27:08 GMT https://community.splunk.com/t5/Deployment-Architecture/Indexing-issues/m-p/538289#M18490 bsrikanthreddy5 2021-02-02T14:27:08Z