https://community.splunk.com/t5/Getting-Data-In/Deleting-Data-Source/m-p/190966#M38016 <P>It is happening because Splunk knows that it already read these files and will not index them twice. You can reset the file pointers for these files using<CODE>btprobe</CODE>. Here is a good question/answer that describe this:</P> <P><A href="http://answers.splunk.com/answers/54070/btprobe-and-re-indexing-data">btprobe and re-indexing data</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/CommandlinetoolsforusewithSupport#btprobe">Documentation on btprobe</A></P> Mon, 17 Mar 2014 16:06:06 GMT lguinn2 2014-03-17T16:06:06Z https://community.splunk.com/t5/Getting-Data-In/Deleting-Data-Source/m-p/190965#M38015 <P>I have created a new data input using files and directories option in splunk web.<BR /> I have put 3 excel files.<BR /> Later I have found some errors in files and I have deleted the host using host=A |delete command.<BR /> Later I try to recreated data source with same excel files.<BR /> This time host is not populating and displaying in search.<BR /> Any idea why this is happening. </P> Mon, 17 Mar 2014 14:32:51 GMT https://community.splunk.com/t5/Getting-Data-In/Deleting-Data-Source/m-p/190965#M38015 jimjohn 2014-03-17T14:32:51Z https://community.splunk.com/t5/Getting-Data-In/Deleting-Data-Source/m-p/190966#M38016 <P>It is happening because Splunk knows that it already read these files and will not index them twice. You can reset the file pointers for these files using<CODE>btprobe</CODE>. Here is a good question/answer that describe this:</P> <P><A href="http://answers.splunk.com/answers/54070/btprobe-and-re-indexing-data">btprobe and re-indexing data</A></P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/CommandlinetoolsforusewithSupport#btprobe">Documentation on btprobe</A></P> Mon, 17 Mar 2014 16:06:06 GMT https://community.splunk.com/t5/Getting-Data-In/Deleting-Data-Source/m-p/190966#M38016 lguinn2 2014-03-17T16:06:06Z