https://community.splunk.com/t5/Getting-Data-In/All-indexed-data-from-earlier-than-yesterday-disappeared/m-p/251995#M48474 <P>I was hoping someone could help me here. We had been ingesting data to an index just fine for weeks, Then all of the sudden all data from yesterday and earlier is missing. index is currently working fine since that point in time.</P> <P>What should I be checking?</P> Fri, 26 Aug 2016 18:14:23 GMT Cuyose 2016-08-26T18:14:23Z https://community.splunk.com/t5/Getting-Data-In/All-indexed-data-from-earlier-than-yesterday-disappeared/m-p/251995#M48474 <P>I was hoping someone could help me here. We had been ingesting data to an index just fine for weeks, Then all of the sudden all data from yesterday and earlier is missing. index is currently working fine since that point in time.</P> <P>What should I be checking?</P> Fri, 26 Aug 2016 18:14:23 GMT https://community.splunk.com/t5/Getting-Data-In/All-indexed-data-from-earlier-than-yesterday-disappeared/m-p/251995#M48474 Cuyose 2016-08-26T18:14:23Z https://community.splunk.com/t5/Getting-Data-In/All-indexed-data-from-earlier-than-yesterday-disappeared/m-p/251996#M48475 <P>There is no reason that this would ever happen without some sort of outside influence. Some places that I would look:</P> <UL> <LI>Were changes made to your storage? </LI> <LI>Verify that indexes.conf is configured properly... <A href="http://docs.splunk.com/Documentation/Splunk/6.4.3/Admin/Indexesconf">http://docs.splunk.com/Documentation/Splunk/6.4.3/Admin/Indexesconf</A></LI> <LI>Search "index=* startdaysago=7"</LI> </UL> <P>Good luck!</P> Fri, 26 Aug 2016 19:26:12 GMT https://community.splunk.com/t5/Getting-Data-In/All-indexed-data-from-earlier-than-yesterday-disappeared/m-p/251996#M48475 jdonn_splunk 2016-08-26T19:26:12Z