https://community.splunk.com/t5/Deployment-Architecture/Index-Large-File/m-p/196317#M23604 <P>The best place to look might be in the TailingProcessor's own status endpoint. There you can see which status each monitor input currently has. Read more about it here: <A href="http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/">http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/</A></P> Thu, 20 Mar 2014 14:55:23 GMT Ayn 2014-03-20T14:55:23Z https://community.splunk.com/t5/Deployment-Architecture/Index-Large-File/m-p/196316#M23603 <P><STRONG>Context</STRONG>: <BR /> When attempting to index a massive log (&gt;30GB) I am not seeing Splunk log percent complete, status, or errors in the _internal index. I see the tailingprocessor adding watch on my path, but I never see an end log when/if the file indexing in complete.</P> <P><STRONG>Ask</STRONG>:<BR /> Is the _internal index the location I should be looking for errors/success/status logs? </P> Thu, 20 Mar 2014 14:46:39 GMT https://community.splunk.com/t5/Deployment-Architecture/Index-Large-File/m-p/196316#M23603 rgaleone1 2014-03-20T14:46:39Z https://community.splunk.com/t5/Deployment-Architecture/Index-Large-File/m-p/196317#M23604 <P>The best place to look might be in the TailingProcessor's own status endpoint. There you can see which status each monitor input currently has. Read more about it here: <A href="http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/">http://blogs.splunk.com/2011/01/02/did-i-miss-christmas-2/</A></P> Thu, 20 Mar 2014 14:55:23 GMT https://community.splunk.com/t5/Deployment-Architecture/Index-Large-File/m-p/196317#M23604 Ayn 2014-03-20T14:55:23Z